General
- Target DOC-JLPT09.zip
- Size 879B
- Sample260803-qmpthabr4s
- SHA256 3fe3578658b2b7b050fe998e9532134cd2742f235bb1c24cd7255dccd496dc44
- MD5 0c05fb2f6bb89bc4f2839322d375ddd7
- SHA1 fbe975ba693d683917c20dee712b1ab14e4677aa
- SHA512 3e2432307238a6eda7994970802bbb59d214d8b6be1ffe0961b67ebf51605038dbfbbcf231df43b54859a242afbce92d5facbf3013fc4e639b48a4d33079cda4
- TLSH T14F1163E5178E606DFE133CF45E4A2B06814A1371385198250A72C2A86E48782FA80AE0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JLPT09.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JLPT09.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-JLPT09.lnk
- Size 2KB
- SHA256 c18405fd7c46e7a1e39d92985c8d97926febb125e4dc1d995b7d0110eab4c129
- MD5 100bcd6d6874c53c254b5109a27b89ca
- SHA1 c003f99f721163021c17fb824984648ff379239d
- SHA512 e6943751267848d4894c1ad54f4d51b5c5dd767eab454c1e6f14d96e8b962788d415956280073298d2d91a8de96c0e64b49c034e3bbb988a5f09d45a4d132049
- TLSH T1CB4141543BE905D4F3BB9F36EAFF2740897BB8626D20C59D0860820C0422B04E977B26
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.