General
- Target DOC-GHN6KM.zip
- Size 584B
- Sample260803-ql2fxaz1ht
- SHA256 80924ffa66cb8891b6782d7b09c4b50d32a60e421a89f8f24a82591daaab1933
- MD5 b80c1b3e886fff5df5f3a152ca9dd882
- SHA1 692e1ce171d3bba54c62ca0d5de475ab0886c50c
- SHA512 a39f54d97cc1e5f007e1b331b1b6a9d156019554306cd628c01c96bb5c600bfcff34f138b0c0c7e6eeb5c2045a4477d69844c311838e394bae78721714c57943
- TLSH T149F041F3AA71EA40E6EF1CB9E6AF70A9A1846A011516A4DDA52CC5CC022C5C33B0A9D1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GHN6KM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GHN6KM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-GHN6KM.lnk
- Size 1KB
- SHA256 2ef658ae8404eb5af088903f8678962d4c6637ebeb8af5685bcf73ff55195a43
- MD5 4cc6c93a9034f718f48686d2cb7157be
- SHA1 5b29e69405512d4c105c693e4442f30a3c65a3b6
- SHA512 106a5fffd3cfa875e67475c9b5e3e7bd6e2f740625a50bfe3959a8ccb1b674541f7c2525e929797cebff14e14377427fd86e0489f78d59960badfb030c31f4bd
- TLSH T15C3199503FFE0624F3F78E77A8BF5B2085BBB8668E24C61D0151464C2032A14E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.