General
- Target DOC-ENV479.zip
- Size 589B
- Sample260803-qn5lcaab76
- SHA256 0e081f5ca9f0729115b01bdbec55130b7b660a936e71b6296950002aa5d804b2
- MD5 2724cd1b56042f679056239182459762
- SHA1 e77b07a283d332c50c88d084d81197833137dc4b
- SHA512 8fc9f635bb3ad7258fdc9b394aa47aabcb0d412256472ec3734940c55faa8fa5e6c0c73bfc69c08508908a2e27e0ce3d7c13d23b6c8d9602a20ee435bcc556cd
- TLSH T17EF09633224619DED003817066F2E23DC1329299CC0EF029936DFC0B0D220B8BF5D850
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ENV479.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ENV479.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-ENV479.lnk
- Size 1KB
- SHA256 63c67d58a4232c8c3f7458ef84d492863e89a111b26e61477dd315aac94cf554
- MD5 e0ae2ce8a55e2bd24c81ca9f9faaa4a9
- SHA1 a8cf3f3a5aaa81210a125575d9f791eeb91cd727
- SHA512 63db27064e90f6b43d41d612146b47cf331da3a48c0416c629b34274dbcf47f2f795ed75d2234522e081fdd93bffbc74b9da799b6e640ef4857c87a50f8f1b77
- TLSH T13F3147503FF90624F3B79E7394BB5B2089BBBD5A8E20C61E0151464C2432A14E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.