General
- Target DOC-MJ0W76.zip
- Size 584B
- Sample260803-qmpthazbpg
- SHA256 0883553a223d7748b673ea628012cff58af7a1dde69a8ff6dbc45a2d3169c81f
- MD5 c333d3a5f3dd110dd6e4a15a6861a28b
- SHA1 392859bfb6b066b67a4c34d0c23ca4dbf2ac2c67
- SHA512 5e5fdaccbeada4b4885587e3a18e819ce9f32a583a202bf75ada1a52f80ae126377f1e932deebaa391443381f073e282a03659e2f83ecbcb05b390a62a23a679
- TLSH T1EBF026E61585778BE615D5310059D15F13728D63045436894661F82F0A415F17C6F7CD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-MJ0W76.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-MJ0W76.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-MJ0W76.lnk
- Size 1KB
- SHA256 4f36e33a0ce9e5326178dc9a159e640754ebf9dd0d64ce73b66e2e56617b3e65
- MD5 bcc910ed3944d924dc73ae11a1c454a7
- SHA1 84a2e0b6ee646606387782bb55843afeeb6c499b
- SHA512 089d5ba5f3cd45a00ab9a0134cb1f3317436b474782fac0bc88bed454abb9f9ffe62b560a021f05f0abb3e6258ef05a92055873420eb6869b9b20a8986eaf04e
- TLSH T1813170503FF90614F3F78E7798BB572085BBB9958E10C61D4141464C1432618E17BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.