General
- Target DOC-SK5L7C.zip
- Size 591B
- Sample260803-qpascszcle
- SHA256 dbcdf1f572d511a6a015238b5a8be3a2526db59baa548d64b6aa6b91dbb4db5e
- MD5 fc533a9cca6bd17ff503f1d9a1b18dda
- SHA1 d77c4b2d231a645d4b56d5ab5f9d292bdf8270f6
- SHA512 972ff214e28e8f354520bb52d02340259b6c7e37578517250dd9d1e1678698284e5ca783abdea167a644a53b6933838f5e84ebb267df5f8af0f6060052945ac2
- TLSH T146F047D2D9418847F15A51385D7E42216FF782E6714775630D84ACCF46015D50A1C949
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SK5L7C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SK5L7C.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-SK5L7C.lnk
- Size 1KB
- SHA256 0d5f69bdb05f99c3e55f3a75a658679d857f0e427a29fae5fc349eb2e95c2c3b
- MD5 892f6bfe457f8dee83b2db3f7020d4a7
- SHA1 51c845ce112a3954583d353fb1dc4b9e86261112
- SHA512 ef9ed60706635be9e908e1145c2140e2704263ab137583779b4b64a6d6082f1a214ec03da3a98225e1b080bf531466f975fee277b1bfd9e8ebb0473eb8221a99
- TLSH T17B319C403FF90614F3B78EB394BB5B1095BFF8658D14C61D0150460C1432A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.