General
- Target DOC-BF5QCP.zip
- Size 588B
- Sample260803-qn4daabr91
- SHA256 c8999503a0ac2367b6809fb2ca60eed1ac6c2efd6bad888834a4be148c6f9285
- MD5 4eeccaba75b1bfa246832cae2161a869
- SHA1 c25af70d2593c7f7d3eb34a0a77e65ee6d2c41a5
- SHA512 4bbbb738ef7d3bc164a334f2cac8d56f7e096d00d3e8f0955e5bed3ff8d0bf838e9b550f4266f7522b5319b73a292f2ce65ed3d9eb39d81a90cb2c67a570b3be
- TLSH T1C8F041B21700084ED21898BBA2305269C62E40E5900C83E3AEA4EC09BA190CE8B2AC31
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BF5QCP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BF5QCP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BF5QCP.lnk
- Size 1KB
- SHA256 80477f3ba06ffa31796a76e7e4e53fd89f9e21ddd07d8e799f79400242cef866
- MD5 e75ce1d36cb02e4a999fbe26d2dcd136
- SHA1 e7ac731d69d669b2f2a8ffa362b8966f8159947b
- SHA512 0113dd0b5b9f60f4e5a2fe235453502397e41cb5cb96311d7b50b4499aaaa353d9449d8a54b791d78912284c14766339cf75b01cb9ccf1c9b57fc5abe3f71c90
- TLSH T116317B503FF90654F3F39E7394BB6B1089BBB9AA8E20C61D0141464C1472A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.