General
- Target DOC-MCL2M2.zip
- Size 589B
- Sample260803-qm4bwsbr5t
- SHA256 a45a2cca9ac35d9bdc1989f33a931001e30732fc7754d4c48a51880eb1d5d835
- MD5 e0d254531a740fdacea633ce4dff183b
- SHA1 4a982f0218d4d57fd72612b278030e8e956fa58f
- SHA512 ebbe31dcd075094099b3aba78addbbc8a26fdfe47b1ec65d447ae817ae4f5e674ce47f06a6df15d6edd0a1e38646bf26d5cec571c003a02f6a56c407d6a80b50
- TLSH T19BF0E1F3631AA20CC6AC50BB901615B7291CB48F80AAE7649F209056BB5A7591B30277
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MCL2M2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-MCL2M2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-MCL2M2.lnk
- Size 1KB
- SHA256 f216122c5fa59a824c95293d96fccfa2bc2ec6aa0e6c4e62f94571b6d46560ae
- MD5 3d1a7d03938e19377f9320245bdfceca
- SHA1 6b1bb32d58523d618c95c447c75480e7bc19bad4
- SHA512 184cec3be7f367b962588f6d3a067eb0cb113f430a304b0f965ba2d934361b4e6a87e032397d3c1adafe07904f9479089e2c7e56642e439cce21fb55dbbdf399
- TLSH T1563147503FF90A14F3B39E7394BB6B2089BFB8A68E20CA1D0151464C5032A15E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.