General
- Target DOC-A3PC80.zip
- Size 587B
- Sample260803-qm2hasbr4y
- SHA256 3a15942641986597499a7108153d41aa8419a656648732b1980432bb63b8a7f9
- MD5 8d1d8cdcf0e4b27e47b4473eddca9463
- SHA1 6a2d6bae4429309368a0ab2c415c6db8f85225fe
- SHA512 0c5564156e8f81f42777b47ca76854ef2cbca741b09a3dc7c935b6c9cc318faa6f82a24af1188755b9c99ad0ca90cb9bfb4a00fd08d67e708e66440eb9e1c4f9
- TLSH T1F0F0963689812D04D81793B9F05AF1C4CBBC6CC40D8672B91275E88E7CB11EE0B4C9F9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-A3PC80.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-A3PC80.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-A3PC80.lnk
- Size 1KB
- SHA256 c050ccde2b06318f49109ccc4e8251b76e8eb82dbc320821fd7b5e2dabe45eab
- MD5 0e31ca237e8aa7addac8b3b4d1f3d890
- SHA1 8489c5118b801fb9a2d4130c9765bd57a532501c
- SHA512 703cad01035e160d70606bde794a4e08cbda0be7ac244c6e04d8b3dd6a783135b8face8ac8a3ceddb732c2ceec8a48aff426c143f6125a4dd30be3db1a79ec97
- TLSH T1023147503FFD0614F3B78E7794BB5B1089BBB9568E21C61D0141464C1432F14E57AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.