General
- Target DOC-IR4HTP.zip
- Size 589B
- Sample260803-qma1cazblf
- SHA256 c73b7beaf21c619ca7b98740af0b989ff7f889beff0fa4f5c354ea5f004661e4
- MD5 630b060392baf60c172cacf142287026
- SHA1 05335bfa69dba58d0895d298ce9894848a4e4263
- SHA512 f995e15f5a4af46254cef71f9e4f4b677c2a0d1f2a7725f3875fc6af585c14b8b6da73a53e8dcb7294fb4a135a3f126293b11e87ccf108ea025306f81437e1c0
- TLSH T180F04737420A4058DAB6507747285772A611068010A70108EEFBFE4D9C31BA49DC8477
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IR4HTP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IR4HTP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IR4HTP.lnk
- Size 1KB
- SHA256 4ab75feb09d549ed444374fc2fc13e6e66054cc447daf00141e87f646bbd057f
- MD5 caf04f4cf5cbd9042349ce276be9e9c6
- SHA1 15602d1a0c634a0e992d8ad4c48076e3bd97e666
- SHA512 76c59fd344c73d7bb9d53ff076878d929136b5fac1d5fe007fcf39f0bb832f5472c9cd34a07f818d848eb4af8d139a11bb5fea98a3526abac3d29e4766519171
- TLSH T12D3197503FF90664F3F38E3398BB6B2184BBB95A8E24C61D0141460C1432A04E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.