General
- Target DOC-D1WC3C.zip
- Size 823B
- Sample260803-qm2hasbr4x
- SHA256 c9bec3b7603acf40057243729e281b7ff5a0b248325ecc96e295142a241e4478
- MD5 7c79dd9bf73a7b5f8b460fd41f920cc8
- SHA1 9d66043f81845277d66d944f15e2657177f5d732
- SHA512 ea2011a9bd81fb48bd9077a0e56ce2ba0c984f485c9304bde622d12163148691c62bb829d1418ce7505e21f8b5d2c13b526c85748412126cd4c08087bc3570ed
- TLSH T1610146FBDA354215C212C7F6303A2DF49028446B6309315418517FB719D45695F9C8B3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D1WC3C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D1WC3C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-D1WC3C.lnk
- Size 2KB
- SHA256 91e48b9deb0802be45c3e0f2d220cef4477c1b706a72467efedddc641c8d5aa1
- MD5 b01507c96ab45c1505c3ea0936a306ca
- SHA1 6c4ab176e5c23348df184cc1cefa9bbd87c04357
- SHA512 32497e84d5306956e3653c8535e90e5d653fe0984a597c0371cfe092cbb4e910f3e8ce77ee0a4a0f950d27046c5cfe5e065b2de2c397f8dc9503bc3416dd841b
- TLSH T1F24137506AF901D8F3FA5F76A9BA2B5184BB79026E30C69D0550424C5432741D137F77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.