General
- Target DOC-78SOE6.zip
- Size 585B
- Sample260803-qnbcha1saz
- SHA256 7ccd4e2793cca91cba553235b230a4b84dc4fa4762879ea472e0ce07fab25ddb
- MD5 db839767269edc6e4e06d45f1acbf855
- SHA1 8c30970b44665ca3724cf8d5c3adc79916ff4aad
- SHA512 f0dc495143eedb74256d0e4fd91b3362b757d80674eb2a3ff8334b2cff6b627d3d74567a6cfc7a1f8cc052f3b3924e2bdf9ef6c99acbb7a05bbf8488c27bb213
- TLSH T1FBF04713534DD35ED590B973DC5D306C5C14B084104C79DD03A5DF017C578776E860B0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-78SOE6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-78SOE6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-78SOE6.lnk
- Size 1KB
- SHA256 921499ea548271103d7b9c7c060027121af342bfd4bed55696ed367886cade82
- MD5 7f0f71eead81d53dfe3eabd1c3e7c733
- SHA1 ae702721b48c326ccb5c0bb06b7c88bf0129f02c
- SHA512 44dc4e55eb3f33b14e1da32ff09d4b31c9c995505901aedbe5e16106a5deebb49e37e1f92f1a1b46f4fabfe999ca3fb7c0dfc2ed791160a1826b253d7421fe7d
- TLSH T13F31CB403FF90618F3F39E7384BB5B1085BBB8568E21C62D4141464C1432A04E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.