General
- Target DOC-KE53N1.zip
- Size 588B
- Sample260803-qnnb3a1set
- SHA256 5b5117ef86fba1f88776ea114e595963b8c6c23649cf95a6170d6cd925a0bb78
- MD5 bc9108cd166b20d0d6b4574bfd6c6665
- SHA1 1cbbf315e5a086e88c1ebf87a9710233da5bc81b
- SHA512 e670bf8c7f44438916c820b3142786080323e0d4596a456c2cc3e2a5e98a36cbbca6e78c3638adae2857986523822684e74f6f4f94c5c3b91df557b34b92e2ce
- TLSH T138F041BF24531A1BC523C83A307F01F2402A810F8801A6988958CCCB15357062D1E6A0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KE53N1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KE53N1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-KE53N1.lnk
- Size 1KB
- SHA256 22fc6b797d651766a7121d46eb0cc26a024560502410bad0e53c84f6186f674c
- MD5 74ca29621e2adfc53b72416262a3a1e3
- SHA1 caf9b0d90cae97161dde3cd9ed4989c075c4a9ea
- SHA512 949846e113f0d7853150320cf7efd917d676a0f8d0ce5a8be09cdf13df6f64ab6988ceb117fe1100375ad428c91d7621976dfbebbf4d48c7147df623148d2115
- TLSH T1943147502FF90614F3B39E7395BB5B1489FBB9969E20C62D0141468C1432A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.