General
- Target DOC-AO2NTV.zip
- Size 583B
- Sample260803-ql4k9sab47
- SHA256 321f0c7c408c906bffd437e5205f50cf2638730ba1f29419aacad8d4e5ca08cb
- MD5 2289d3b21b30ac4a1ebb543c43c61ec0
- SHA1 1bd54ba17f9454029c090396c948074edcf8277c
- SHA512 26dff39563f581dddbf41149d6f5b01a13b6665c68c1158b610368c3351e7a1193611c366a95285fac5641e0acf900a8af2416a6860b1a0cc5588ba8622913f0
- TLSH T148F0E127BC96804CCA0D8070A76B609BC33850950947D5BE4AA0EAC9247B9A13676698
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AO2NTV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AO2NTV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-AO2NTV.lnk
- Size 1KB
- SHA256 fa0bf73ffb1083a4c1c16813797617b4eb7a57505158066664ab9fbb7b0a3511
- MD5 82f08a58498d0fae9ef73f0d6b626126
- SHA1 3ab4056012f49f1bacb11d59aa75306e783a01c1
- SHA512 f2cd3a6fad6109eceb56776240ca24e9b2774f2d673138b0b934b572a5c20c0801344759c6663019091e56fe4ba24bc540f037196d9bc7064b995cc7f5153ebf
- TLSH T16C317B503FF90654F3F38F7398BB5B5085BBB8969E21CA1D0155464C1072A14E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.