General
- Target DOC-K660S8.zip
- Size 847B
- Sample260803-qmsv6azbqb
- SHA256 f2d85fcde28236615e43b2c66c7e6c94dc9cd83a1aa655620d19fd2f71874de9
- MD5 7fd48be09e1611bf7a1754a9dff05167
- SHA1 6ef8cd9dc6258ec625178f37c49cfb28324559e1
- SHA512 495d6c797e1ec7503659c2a0376a7dab157cb6f1a486611f6fe54b519bd0b07fa4ec15a529fa82293b401798b4ce04a7db184c9a6a3874be8b70f16fa4426c41
- TLSH T1F50186B5D72E7251FADB8039C80C70B7E695C0C11DB29A34A374EA64FAF73842BB0020
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-K660S8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-K660S8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-K660S8.lnk
- Size 2KB
- SHA256 0bb7d1e9def0213261e833d58ff2a10a0f91038dc34aee989d6bf7915294b4e7
- MD5 431d50adc790e9dc98f67a7fef635668
- SHA1 035297dffc2b5ac8c85d051035e9356883818f1a
- SHA512 14cb80310aa43fb1926bcfc83daf28aa422a50320c04c65705708f683c8faff9227a25e74d25e024ab3f638b4badee3c21ad2ea5ab903c57f7de9dded3590427
- TLSH T1444167903AE905E8F2BBCE72ACBF2351487BB9556E70C68C0890850E1832B05E577B53
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.