General
- Target DOC-9U5RVM.zip
- Size 834B
- Sample260803-qmrcbsbr4v
- SHA256 12c64dccd07a5eb7142c73422006a35d6885e4a2983ec7fcb3c6f46280caa9d5
- MD5 a2daf91aa18a3cf0bc688f464298f153
- SHA1 19236acd1b9b911eafc6a53519709c6a42d54041
- SHA512 091db63423f11ca3993820df59dd69d247f44d1825391dc4e5d0f965503ccaaeeacee2bdab4a382326d4708c013850b7a2e22bbf38b0074dd7a00584b6bcb339
- TLSH T1870186C4D0154502C5DB35BA50F2618B7D11B60303CBE443305BCD2B1DABAF653863A8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9U5RVM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9U5RVM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-9U5RVM.lnk
- Size 2KB
- SHA256 d66ab527e959926330ed8ea2b8781cd7ba031aa3ecce62309da975653c80c0c1
- MD5 33b75dec519aa1744dc759965d6c1ef7
- SHA1 f36045642d438d5ab0e13dc4cad6bcb3a60ff65c
- SHA512 67966a58790fd52307895dde77d8c83213e89b26d9eee62ec96218dd5c87bf16dd3e6ae86c492914b5c42042aef8363d7a19dd6a5393e0861c4e017119e0b934
- TLSH T166416A603AFD01D8F3BA9E72ECBA671145BBB9615C60C5CD0850810D1426704E577FB3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.