General
- Target DOC-Z7UKXD.zip
- Size 586B
- Sample260803-qmqe2azbqa
- SHA256 c7878d2756381c5a4dd6fa1c6d118dfcf37873df3bfbb6deaec451c2e0de4d55
- MD5 818a551097952f46b6b809734a2e7d6c
- SHA1 5be41aa564139121462ac82159ecf7f40862a59d
- SHA512 db2abc6e5c159efa2d3a0dfc39befa66e716bb37a9143843b3d27b6e9badd92c4362f7eeae209a79cc09f833cee6678b3e7c83650d6f39617a52d3bb444ea83f
- TLSH T180F0E1BD77011427D997DFBECD146C120219E41E974E061220F0D55AED181C7970B2D5
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Z7UKXD.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Z7UKXD.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-Z7UKXD.lnk
- Size 1KB
- SHA256 823917a7622a211c612f86b2862dd809d91401089f7d8f17ce23f489d46da2a9
- MD5 1e58891c8881211fd132ec761ac9f015
- SHA1 f9e2a254e6dc2461fc4cc2a41fcd400072117fcd
- SHA512 f373f989b4bf2cb1af24c75369c6ba55367e6e9bde59133229889ed486ad04f25755c726587c774ed2d0def56cd72b09e5c3d575edddd30d1613d21f97d5b7be
- TLSH T17D3197103FF90698F3B38E3388BB971488BBB8568E20C61E0051464E1032A14E27BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.