General
- Target DOC-HBJ9GZ.zip
- Size 918B
- Sample260803-ql5hkaab48
- SHA256 c8a275728f2d57f54138fc695d4ee5f32f68521eb4047959d19a3190346b44c3
- MD5 b2c3eece2ef0f8fa4ca9ea928f11af9f
- SHA1 9992d95cb04e9723e012eded537bffed88eea528
- SHA512 2de658884c3cf6e72f85c2e358fbcdabac8d7961669ee1d895dd39f676ad641e182bc00996593e70bd7dbdda28a5329cffd0906e4c872185b202c62ad60c5391
- TLSH T19E11B7DFC933A00CCC72953CE9337412AB50919DC8941A0AA629939B252CED4FD27A5A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HBJ9GZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HBJ9GZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HBJ9GZ.lnk
- Size 2KB
- SHA256 db63e3a958470caebdc70b874cd4945e13170aad10bb3fe28955fb1435b34114
- MD5 5d508dcfe22b0935865f596a7fab6a6a
- SHA1 086ab45eba239dd7b602d9b0419497bc1371c48d
- SHA512 1069846a65e3a97064b6dffaee05b71d37a5b4dd7091d758281beb6a34960afddbab4a70ce8727eb639bfb547831520b3e4afdda211fc8f8ea7a78671fa08e00
- TLSH T1CA412D803AE905D8F2FB9E72DCFE5790457FF9527DA0C18C4940825C5822B45D9B3B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.