General
- Target DOC-MQGYW6.zip
- Size 591B
- Sample260803-ql7mxsab54
- SHA256 6f41ec88d3b49fa5eb3fa8ff3fd0d220f1f023eaaaded5a21b6c3106771c916a
- MD5 e0b6cf58cae6d7640ddae1b5f8beb6a0
- SHA1 48c7d941a31c14aaf0a57a9e074550ddd92bba9c
- SHA512 d253cef9fa053f0e275e4afc645cc7cdc09dbc92f05564378bff82db2b3d9cf22198d05b817507527aa4ccef650081f2435b5ee16676103fdeca6ef3468d893d
- TLSH T180F0419D07504C07F00799716DD3711A602B82020C1C205AECED4C6515537A35DC9907
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MQGYW6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-MQGYW6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-MQGYW6.lnk
- Size 1KB
- SHA256 0732e3dcdc467c550c689ccc9458695c7b5cdc6e315dcaca49b96eb0307fe0ee
- MD5 9311e16203ba2adb2e2921ba4bde8733
- SHA1 794e35ecc868aeab0eaa61e2f9762ab0e108f427
- SHA512 82ebe3eb8f2671df813e7d9099a581741cdbaff8c2216b469719a31ddc9dceff91d85f0e1af9ef563a5bdeb169052f719a3edc308744dc5fce2d9582ae3687da
- TLSH T1DE3124503FFA0614F3B38E7294BB5B1085BBB85A8E20861D0141464C5422A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.