General
- Target DOC-7QKPPE.zip
- Size 588B
- Sample260803-qla9qaab38
- SHA256 0e5f8d3e32a48327d9c4a3d3861e2a81c83048bdd125414f6f1c3cd5f08e01c1
- MD5 6f93b0be17c305289957bf7f320febf8
- SHA1 102b60dcb31054df85cd04426d74ecd1be0d2a71
- SHA512 7b16c806d94861f64e9fbb6f75248d383ba037f0507175ae29cbe3fc8ac23eae0e5798b125dcfc9802a8e1b3e46ae4b7807842c1e82ddd70261598f94f0d8e3b
- TLSH T1D4F0AC16B9B00033CA3FB6B0A1A43948894064521A99924E5EEEC65BEF865A13639D7C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7QKPPE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7QKPPE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-7QKPPE.lnk
- Size 1KB
- SHA256 914c86d28b2ab2f83d5043d18b0cbe62339c4e03d7f852a5d3cb3abff103deee
- MD5 ab4dce30283f292d4bbdaeeaae997d1b
- SHA1 875eca23ae600fc85410adfe86e0071d7377b724
- SHA512 50d2151595492226dc2f6a0fd2964e8c3ba55f9dc8b5b83d7e1c65b978c1c4c9efe4ffd293e00bfa1919042b6f8501f67b938a1c6a1bfe364edc117dfa9676cf
- TLSH T1DF31CB003FFD0624F3F79F7394BB5B1084BBB8568E20CA1D4040460C1072A04E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.