General
- Target DOC-PEOT82.zip
- Size 846B
- Sample260803-qk7arsab35
- SHA256 9af275b315eb8ab7819e7375640a641f2ba8aa85dafe31ba75a057d2d50d2a93
- MD5 4a04fa94e504ae16bd89b317156a746e
- SHA1 3bfe18233afa72a4d41d6779fff4e03ba22d4641
- SHA512 64eb9fc62d2ed8506817299491a7cc111b9201ff6f34ab76ea9b43fed482fbd18a5ca89fe2c7905ae4ee514a089bccbbef0214ae1cc1d48c0c6c00a9a825ab0b
- TLSH T1540186FBC3398AF7D88B8DFE1201B2696A30D04179DF2C782410E13D9EEAC981F14261
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PEOT82.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PEOT82.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-PEOT82.lnk
- Size 2KB
- SHA256 9c17c129f08d34d87ccedc4c420e5530791b7a7068d38eac4bc5ae357d3de816
- MD5 c853ff1a65114f8252dd99116cf96c36
- SHA1 413c70ac83f74aea2e5d4a0646111fc0744606d2
- SHA512 055ed9fa7d4fba6e51cd5e9d6a6d77fbcce9762b5b154735d24f9857d85d7cf8aeca570d0b19c25da9a7b0910a2fc26701632bcc01687104ca74e6eae50e4233
- TLSH T1FF4125803AED11D8F3BBAE76EDFA271489BFB8A65D31D21D0550824C0432740DA77B2B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.