General
- Target DOC-QTNE57.zip
- Size 591B
- Sample260803-qmkjsazbnd
- SHA256 d387939e3962eff7943ec0117e195e2f666f6204d39c6175ccc657bdc37dc033
- MD5 54444332236b909e3abbd55d77690499
- SHA1 bcdb62cf9b82f2b399d012693a7a60b1db44ced8
- SHA512 35b6177a2ecda320b5579f9396a4de85a45493568909277f8078926c9f6a3de54419410492629f5adbe68ce1005ecdcaeca6b3daac16e32c4810f73472ef5746
- TLSH T1CAF041B701A35002CD4FAAFB9C07096902DC40344E884BBE5859F10818D0DDBB74A7B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-QTNE57.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-QTNE57.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-QTNE57.lnk
- Size 1KB
- SHA256 7588f287f3371c5cbd82f5fc360aeb41e4817dbecf1610ae01d06ce35982181f
- MD5 93dc8980a1b7a6e5b06b06deefc3d882
- SHA1 f19e6bb0fc6197c578ff2dd7ee4bc4b339db3e04
- SHA512 2f3cd1a1e1e2f17f2b5c2c98d71225f06adcbd025c3d9e1ccab71a1e80b6d2d2d2d658dfd41047380b7c96df66c1496fedd0ca15670e854267f8f79dc3778e31
- TLSH T1F43147503FFA0668F3F78E7394BB5B2089BFB9668E24C61D4141464C5432A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.