General
- Target DOC-J8LLDY.zip
- Size 577B
- Sample260803-qgz3aazzfv
- SHA256 2ab05e11b03ace9f124283d58aea1d807dca8e7b51f61a2c76f6aa919e23a370
- MD5 2920a9bab16c3eb4630e34b1c58b5b75
- SHA1 2e7a3d94f6ba58d4584865cf11cda937fdb67703
- SHA512 1bc466085060e73763fb4a53f4af41ea9571a22a92a7d609d2c76f0a5efdccae5b99b8d11266ae83cbf9037024270e2ea26f03570e9d092656449ef941ca36db
- TLSH T101F0EBA48302867DC510A2FBC16727254C60075603F33AC5232EB71ED9320ED8F1E4A9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-J8LLDY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-J8LLDY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-J8LLDY.lnk
- Size 1KB
- SHA256 308ad008435740115e94c768ea8f1fb413ef08c6def411d267dcb22087ac5fe1
- MD5 19b75ec1ecd69475c84bce5b07324a70
- SHA1 b159260c2304df91084c7a17576e1c18e18f7f36
- SHA512 d1ccd878de9e93ec12c92488a1b7bf34591a39dc33d7803b8ed7e62e69390374ee947a0131e37bea3f17342af9358cd9cd4b8819ddc3fe93633c4d39514c6b87
- TLSH T1D83176503FF90A24F3F79EB384BB5B2095BBB86A8E21C62D41414A4C1072A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.