General
- Target DOC-0Y3TJ3.zip
- Size 588B
- Sample260803-qljabsbq9v
- SHA256 f410802d11d4ca0d52f8b59203ee47483f818a6afc37265b3085b3352281324b
- MD5 cd3a59ce0ffbca0c3db4cf47ae7df496
- SHA1 d34432569d43e696a22f7759c1f79c89787ca54c
- SHA512 9213cf619eef9463fc3a9af6369689eac80284098209a8797db28727822ab53762609567c39ef4b79609c75e84071e769ff2cdced6593b0ed30b960ea3dc5617
- TLSH T1DAF0E1C60A2783B8C320E838652664111FA7E66617ACCAA547A8DC3F3FC42E97685524
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0Y3TJ3.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0Y3TJ3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-0Y3TJ3.lnk
- Size 1KB
- SHA256 29c537e5acd5a589fbe09fa9cde99cf949a53152167eb047b09829f4bddc84ef
- MD5 06bc7e73dca178988c20f9ca30fca01d
- SHA1 db432fb1a896fa2b9e13e0eee4b03691f095e495
- SHA512 99b5fc5dd339f7469be738c3342d42f6a1b4c3f36c3fee549a120f7d2fe3d32d8792dd6fd962b76d2d06ad4c342a34308d6d62518ebd4c337107a9d40bf32916
- TLSH T1033147503FFD0664F3B79F7394BB576085BBB8A68E21C61E0141464C1072A14E5BAF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.