General
- Target DOC-OE1VEO.zip
- Size 591B
- Sample260803-qllepaz1dy
- SHA256 3c8ba02d38a4930dcdae2b03d3b1ba0779ecf6885cc0f9e3ff7b92cd58f49e3b
- MD5 3c6a6447e032063bc31ce91df2aa2659
- SHA1 e81b03ee07b4d096d846cde9f3e925f7f9971ddc
- SHA512 04edee114d8a224d73b6d55db65b9c428c344d446193bf1c793c22b86fb9dff0038ee1e41fcf0fc36a94faceaddb9eb1b4ffa7684e8a83d7ad90d9e57eb0731c
- TLSH T193F026A183737B09D81F68F3954164F687A042024A0D661F2FD5D15F8CC4EEDFA26123
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OE1VEO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OE1VEO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OE1VEO.lnk
- Size 1KB
- SHA256 bd1f43432fbb332f942c38c35f95099ea27d0acdc14610866572afcbcb535906
- MD5 ab4ade772c1a201beee965e896e36608
- SHA1 be069e09358ccf7f5140aa03508fe5b6ba5c426a
- SHA512 a71efdf8665fed74a6c0fe00a14780459899432d6f455b7256d0a92b96ca53e3636043a7119cb275f06a0c3de6106b5159553515e1b20bdfc5f9062295320c89
- TLSH T110317B503FFD0614F3F79EB394BB6B2085BBB956CE22C61D4151464C5032A14E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.