General
- Target DOC-SHN5DB.zip
- Size 584B
- Sample260803-qk14razbjd
- SHA256 1e7df66c2e1f3bfc70d8b2d85e31086b752a47307985e275e2648f6ba39b3640
- MD5 f711c3058968db148ad1238775e4e902
- SHA1 d01eaeaf80e7e397ae2d02eaeabce6b3bdc027ac
- SHA512 de741862ea428349a29331c25908f30465ce56ed5f947efa512d02ce0d2aff448bc295e29fc366800a6adc000974d6224b2ae23cfc8af56a65f0ea4d65830f11
- TLSH T1F3F041F361261F26F101D8B5C0EA98E612B8078440C246130238F82C0C06AE3FA48104
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SHN5DB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SHN5DB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-SHN5DB.lnk
- Size 1KB
- SHA256 573f050762b53df469fc31f1267625f1c4db5d71e373070571faf0cd2026a8fc
- MD5 c95b874f99f3102e22958c4f99d9a40e
- SHA1 cd350dd95aa42b9c869ee1bd00f0bbd871e8e678
- SHA512 a3014287717a6df9b9dda9d14471ec7d8a757834d1670c51a19608ab06279ee2a4f6148b5eedc90a44d4fd09e8c8b858701caf86745b05d20aba8fdaab38948d
- TLSH T114319E503FFD0628F3F78E7394BB671085BBB8669E21C61D4141464C1032A14E27BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.