General
- Target DOC-IVJTXN.zip
- Size 580B
- Sample260803-qgz3aazzfx
- SHA256 4301e30fc639a4c89517efff43912f1108a0da510539bf75ed0bb6bbd7dc317c
- MD5 f1814cc54efe8df9c812dfc5aa89b651
- SHA1 8c4e259a709a0f58dba094f1ca49db2eef27a780
- SHA512 7d2f5006a3eb098064c23d8b857045bd1f4fd197c533334c8c8b1082648effc1f2288a4fca86900fc592031df964358fd731de940a284da9e9df6162a6ecbf0e
- TLSH T1FBF026724B10A54CEF18E07F65A0027F56F9939A104D5BB18F11E3DA3C5C0C85A97058
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IVJTXN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IVJTXN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IVJTXN.lnk
- Size 1KB
- SHA256 7db7fc76c82a224d9a7c762a3c978e7b65cbfbcd325e49da63b3479cd8add9f1
- MD5 89230ef24c1aa665a9a407447191b97a
- SHA1 7d414febe6930e8862d8407853dbeb4db1b0d69b
- SHA512 5db6d3589fe8dc44d29a0b057d01204dc888c320a69bb9f3ad00d1c7be0ef00803aa9b9889c1e37bc8cfa9fc55f6db9e450fe22e0e5085b641aa14751a09b163
- TLSH T1513147502FF90614F3B39E7394BB6B2089BBB9A68D20C61D0141464C1432A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.