General
- Target DOC-2XIS73.zip
- Size 589B
- Sample260803-qlft7sab44
- SHA256 ec73047236673d21b09357af6c63df5ca57de2afbb9da49e788512be575ada3b
- MD5 d586c86b43bc48fc35429651cd5af5cf
- SHA1 38a3e9dc0efd527c80708078dbf0c030e8eb2726
- SHA512 92e4b33a2c792e7ffbc17638e1a6ebf16e2affeab3dcb988d05b9496d85d0cabc548a0738ddf6de85517809b5e2e20118bb2f83841ed764b08559ea020bf3158
- TLSH T1CCF02093A186C4CAC8EEC07D86B27F864F88E4C18D052F2735A4FE234EA10C36958471
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2XIS73.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2XIS73.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-2XIS73.lnk
- Size 1KB
- SHA256 65f993a9757007264c756172fa5f83f4023197446c4fe205e5b7ef86ea9ad5aa
- MD5 c54d952192f9f63f06dfb58f816370c9
- SHA1 c63f454b9b4080d9ba1a9c761036f0dc9af74169
- SHA512 7270fdd1f74ea36e308226209c23a2732570eb02fa5865638c6908d2408e43e3df8d3afa7274da89d33be134aedecaffde49da890609c4b509d2465c92162ea2
- TLSH T1DB3124502BF90654F3B78F7698FB5B2089BAB9568E20C61E4141464C5022A14E57AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.