General
- Target DOC-GNAKL0.zip
- Size 584B
- Sample260803-ql62dsab52
- SHA256 94a5376f89e3a3a96f6dff27df296d5ab3b66bdc074df00e08ce2d3f5233310e
- MD5 805a444ed8b5480f00c8525eb3f9b22c
- SHA1 da84fa3f67787ce9ce3fe9c2aec65d9944ed02f5
- SHA512 b490f188f366cd17033e095031f76954caf9c889fd0721285f20c52c51ea0b60055630259ee1533da200758ca3926c59ea046c74f124b005f43c3a79bd8d5272
- TLSH T1CEF0E19620E74069FC57E57264EF1792A89D0402D37C2B2C6132D5C82445247746A1E7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GNAKL0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GNAKL0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-GNAKL0.lnk
- Size 1KB
- SHA256 4760e9dd07bf9e810efb2a20bfc8e0b1e96d6e5ef0a9cd0c46edee6fbefef3ca
- MD5 61deb0371e7e3b75d5ec6d253859ba3f
- SHA1 6206a6ca3c6d3f209a3966922381a492ff692808
- SHA512 0c546a13f12a21e2a1b2427aa9f0405e73f098be66dffe438a3fbf81e2e7a0273566b5bd0362fadb646e0d1b9dfa548a050b4410bb33e483dbd2d6144303b6ce
- TLSH T18E3147503FF90A14F3F38E7394FB571085BBB9568E20C61E0141464D5472A14E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.