General
- Target DOC-TJ121Y.zip
- Size 587B
- Sample260803-qlcsjsbq8v
- SHA256 f545aa85ed3afbdef9e032bc77b74bb79b9ef8efa6f7da08c8a90da46658ea50
- MD5 db674a0c20343fab633cb68bb1e130cc
- SHA1 4ee6746fff0634b0f9f175eb3eee13a554f15c8b
- SHA512 8667c6b3ae377e30d9df8d12796e9bcb17d707b53d78deb5625884a6cbb7a77d15b43de86d46422f13583723cfe557aff41fc3fe9b26b42507ffa11c7e004a79
- TLSH T1AEF0E1AA8367B805D3DFD13A93B13F2C88749559465B79840E70E44598123D25B8005F
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TJ121Y.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TJ121Y.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-TJ121Y.lnk
- Size 1KB
- SHA256 b77345fe74921ccf52689d0a40f016b2b4e52fd28b2b987c408762205e814207
- MD5 f5d9e83788ada8577c9dbd7b83778c02
- SHA1 7b5536eff510d05c09392a4378634d2c58311341
- SHA512 60f5a4eb01d2b4687e87372b0d6cfb4d21ea173cc5b8162a02f94cbb882f69e6cd51f300b2e5ceab8d1d8d7493373e7093ee5a635fee7e8381a838f96ba12948
- TLSH T1C03147502FF90664F3B38F7398BB571089BBB9568E24C61D4181464C1432B14E5BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.