General
- Target DOC-8BQZR2.zip
- Size 591B
- Sample260803-qmlrvazbnf
- SHA256 b88c299f68a83807b7c4be22c130a3b79984b866d3176b0ba242e152917f0ddd
- MD5 d9a302ab1ed0803653ae97d2cdbaeb6e
- SHA1 f6285551f0e2b68dc6f11911be5c26f3c3fa9507
- SHA512 e15f02276f180e11a20feee15416e23443023de24c59f8e793bea1d789e98d48686f004c4767f8cbdc526c23f0685ed3b54dc0e61feaa185fd0e5edb6050ad94
- TLSH T1FFF0E1BE5043A40FE327F4F4FD1C52DCDC754308057AA1051E5EF4064811AE9885D0C0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8BQZR2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8BQZR2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-8BQZR2.lnk
- Size 1KB
- SHA256 7669e41cca5161149c67e137690e41d70132782012422872a329aebd563c33f0
- MD5 9d6155edaf12080a105ba971aab3b191
- SHA1 2b7760c60e113a6585711644b9c81a30b8ac1676
- SHA512 18a358ad2faeb825cd3698e15498af434951a8a5c5cfa7303184b719da3e6109242890a6b7022a5d3141df0c9d2d3c54b7d7372d351e59e7a22bb7b148e43555
- TLSH T1973197003FFD0664F3F39F7384BB6B2184BBB9A68E21C61D0140460C1032A04E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.