General
- Target DOC-IOGOST.zip
- Size 589B
- Sample260803-qnv2xaab74
- SHA256 628ce8a5362556e0f73c5933ae1973a50c74464429091ce66a19b2c83ee75083
- MD5 64db8351bf76ad8218c23a9b58e63caa
- SHA1 c8de5729fc10321bcc0ba5ce292a5548f2e03d1b
- SHA512 66a4fc5d4ad3bd9d3cce99069623cc01eaf50a3aeeff3f9af86f183b106fb9a21af4e43d5ebb23c54d507409ec52fe31d3ed118b4bd9be5c7cab997e9ae1f83c
- TLSH T12BF0E1EF0546D04ECBC985B0AFB98212AE38EDD2005F5E680129C99382F2597A9491F3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IOGOST.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IOGOST.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IOGOST.lnk
- Size 1KB
- SHA256 3368a4238ef9c033a356d0111ef0dc2268639b885862addb7565a8017fead92b
- MD5 ba481fa32215e6616adcc01ab8295d22
- SHA1 71c7c2f6e97bb3b41cba2ed59b1967acd53e2469
- SHA512 0c42cb422319bd6dfda67e24331472fb3d83843267ef73dfb7a92cc338174acf53d1f603127df8376bdfed8be03fb3471689d0bbf3c49db483be47a9e56643f5
- TLSH T15B31CB403FF90654F3F39E7384BF5B2085BBB8968E20CA1D0040460C5872B04E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.