General
- Target DOC-VH5Y7W.zip
- Size 586B
- Sample260803-qn6teaab78
- SHA256 c4f0dfa812db126d4a4086d9d9494b89738e48f0c710479b51fc3102062035c4
- MD5 184aaab2d13ba8fdffaee07cac1b8e81
- SHA1 f093354adb1228eba404e2fc187ab2ea8bf70986
- SHA512 474f71618e3b8cd1f72e25a9ec6db61b88306e33cc6d3575681dec2635659b31a697aab43c36f1a4b9495ff34f04e0166c6f5271f3cf39b266eb90fe6723cc0c
- TLSH T1FDF00CCBBBB85118E46285B747B0A4BB88BA84D00EAE5A252344F48844F00B01A1AA74
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-VH5Y7W.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-VH5Y7W.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-VH5Y7W.lnk
- Size 1KB
- SHA256 c542ee6d245e3602c78d71fe5a6cde7ca305410756997c4394a2886ca3e7fb57
- MD5 887dd30cfe01bef74f91373a722c861b
- SHA1 8bf8fe1ba1962e716171ec38458c032292fc5a2c
- SHA512 10fbc1085fd27e0a24d27119eed05afe73680b2756c06a2c397709d921bc3655552882ea0fee39b344bdc572e3862a3192a86780ad9e1df61588ac9d4b030a16
- TLSH T1A93147503FFD0654F3B79E7398BB5B1085BFB8568E20C61D4141464C1432A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.