General
- Target DOC-7HS9UD.zip
- Size 591B
- Sample260803-qmch6szblh
- SHA256 7b3c697cd06d23057bfb299a04fa13e626ab109a1a8a9f821deb2c312877de2b
- MD5 8238884658eee702d6f16fac30e0402e
- SHA1 cb4c5d22f41846cbde39ccbc9a7463e16b05fc70
- SHA512 64b664019a6f7ee2a0820de26712bb260fe705abc7765f3c61fe0c002fa3e1f7e1e066b64938f7df6c18ed7b6e02cf1dc2cfac43ed522661823b8808b709c619
- TLSH T1CBF0E19852EB8C22FD4769FDF843796F00284499107AEADA4BDCF0E55A31160E46D894
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7HS9UD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7HS9UD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-7HS9UD.lnk
- Size 1KB
- SHA256 e1c4688e2b6722bdb7585916dbb787cc4b87868142049ceac051d8d2ce75f562
- MD5 86198eb025f59d44fa720d01c5d81e89
- SHA1 be5c04d720dbb03a061853006deed3135f3dc311
- SHA512 5b8c47054a55f206b5ae1c9e74907ab14d517b561979bea1460090bc0ae2fd618b27f0214017443a942a59db32da322c35d970d9645441ceb964d5cc50c51298
- TLSH T108317B503FFD0A14F3F79E7798BB5B2085BFB9568E21C61D01414A4C5432A14E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.