General
- Target DOC-F98MGP.zip
- Size 590B
- Sample260803-qnsxjsab69
- SHA256 62e2293cb79752d912f4dd305ca49c269522af36830772c72d0ae206f1bbe924
- MD5 8edc613f88e2a1539f6bcd53aca02068
- SHA1 f7a551aafa913116cb47932b8557bba494b3ff4d
- SHA512 b08978447a6b6b6dd4dea42c6f1011e9147f6e65b56816db68177a595601f028db26cc5a3e20395f3ac9be1b7f39ef036e2f211b06cc2411d5519478a18a1abf
- TLSH T101F0419B85718221C5036AF937E2397F8CA0AA8080C5E30D3108F84C3A10643C9C22C8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-F98MGP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-F98MGP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-F98MGP.lnk
- Size 1KB
- SHA256 508f819d15677c384072b7c8a211f1f54d44982db6b996b6d11aec9af863f7b1
- MD5 13c72a2c6cd33a86586066a986d9f328
- SHA1 dafc4c14e57607dfc78c024b55f672a7ad31496f
- SHA512 e8eb44918cdab69e2016c1a63e5caa221a379fc825ca60b73ec2a6f82ceb120186dd949ffb04c010ef8f56c5d40cae68b2dd85d973da515fa25329050aef9538
- TLSH T1593147502FF90A54F3F78E7398BB6B1085BBB9668E20C61D0141464C1432B14E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.