General
- Target DOC-OMY78E.zip
- Size 581B
- Sample260803-qkvxqszarh
- SHA256 7cc9050348a1d19eece2f673a5dd0aa733e43a03b0c7faf030e697a7d69afe04
- MD5 5f5ca50dee157f453285eec3e7a03cae
- SHA1 c7f51e7df97eb14d6f51c93b2fb39eff6ff8cf96
- SHA512 aa758c4fd08d124c0b64ba0fee86de4f35b05de1a3dcac1df3796af7d8d47cc2cf96757ebacdc3ff484f3d0b17b02b7688cbcf4863c9a7c5020254f98003b50a
- TLSH T13FF02670461640CCD61DF3FC6D31777D29106447CB2F00CF0AA5D24C64271764D4066B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OMY78E.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OMY78E.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiler.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OMY78E.lnk
- Size 1KB
- SHA256 4d4f6d8ca2fb1ad1e97b7e8be1bb673d6556c68ec60679d9973a2ed226b59441
- MD5 ab29459048324dc8f98489fa5c17e3be
- SHA1 44ec82087ed4c812a0afb9a6f8dd3465a32053cd
- SHA512 300eb0c7d155a43849195ef3d1731f4278972c5c068ea1de9a664779c6a70b3e8bdf094426346183923ee6f298d708a515a51fe13b6f538dd07b0857f2537fee
- TLSH T194317B503FFD0A64F3F78F7795BB5B2085BBB8568D20C61D0141464C1072A14E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.