General
- Target DOC-IDAJ3E.zip
- Size 905B
- Sample260803-qla9qaab37
- SHA256 896fd4ff2990905b9b58795da43ceb6a9d6fd4e8d229d45ab7e134c8da144795
- MD5 b79589013c7920d049b85629e2a6c063
- SHA1 90b518bef46d4f49dfb2da7f2d9ef81b172024ca
- SHA512 ab4cb4aa9de502b476483a54312ddf298a77605ff090cd1a6864540454850eee4bde686096a704903d887ff0a4eeb1820f9f9a2262c52f1aa31d937c17652cf5
- TLSH T1381196A2CB81DB03ED40C0F663B4F8AE5DED955D9820441FA8698716325AF5A4B3CF22
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IDAJ3E.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IDAJ3E.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IDAJ3E.lnk
- Size 2KB
- SHA256 e57372185a49167fdd738b0ad4c84da215d7cb73fdc965cffeb81b1ee12df258
- MD5 015b028a4fa77d72a175c0f7a04d4ce8
- SHA1 aac2ad04bf6d7c9e0a351d14383a5d865a121b71
- SHA512 d00369e0f40918e5e27383fd4086e2b73bd8ddaacfd9a2218147be01ae1452b8c76c4c330287c3cdc6a3b090aa58ad687a4998074713383026db0250868c27ff
- TLSH T1C34148802AE911E8F3BB9E36EEFE1750497BB8925DA0C58E4951810D1831B01D573B22
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.