General
- Target DOC-AT7GR1.zip
- Size 592B
- Sample260803-qmk6bazbne
- SHA256 878a368db336f290587e050073d1c5847c41718771ca9efabe5849d112243ac2
- MD5 b4617da940a61bf464643473844304ca
- SHA1 65a4c5161fb55b563f5d19be75ce27a8cc21bb5c
- SHA512 f1782d0024a5a4901cd53e9e016e9230d41a612989a8ed976769b23bf2547abc5c43d72a6e11bbc530c1ac33f18a6f1563d250ef97a50cef8f5f8abc24346fac
- TLSH T1EEF041048A35F889F01BC2FD5C2296DC23909987516968700BAC9DAD6C180A35B06050
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-AT7GR1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-AT7GR1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-AT7GR1.lnk
- Size 1KB
- SHA256 9307ebe9fcde9dded27d633ba3011b97ef3b609b04f9c42466980990f2bff87c
- MD5 f6dc08fbd692abc064564ef3bb79567b
- SHA1 a87daffd394ba8e74561285b52cb8c82f606d9d3
- SHA512 6973181f406fd160afa41290575d0d97707c1628514245f67c011910e8a29a8ffce4fa35caab58c9d2bff9e3b0922d24c951a2b2a67082eeeb3ec749eb4ae8b2
- TLSH T10631CB103FF90658F3F79E3384BB571084BBB9668E21CA1D0140460C1032A14E17BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.