General
- Target DOC-47JL9G.zip
- Size 592B
- Sample260803-qpca7acj2v
- SHA256 786e49e7d6d2b9db4e36f07096f9b95de1d9081481b958430451ab442b9fbed4
- MD5 12dbc912f1dd58d99dcc7095aad7699e
- SHA1 22e407c326fd7c8b7788ed4d896d340ddfb8e43b
- SHA512 439e05d6a7f2a57d4ab1a1df714245ca5ca568e3a01ad71e7a8aae354fac259b909a22e2a3b04c42469628b5aa168526102a3cf5f8f451692e1cbb8da34390ee
- TLSH T113F04744216E5421CB08CE34069C27D34533ACB5C71746D27A5185427932CB5D7C43E0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-47JL9G.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-47JL9G.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-47JL9G.lnk
- Size 1KB
- SHA256 d66d7b201bbfa4f5bc34d03e7529f4289bf81242edb026ecb245e451659f9e16
- MD5 b16ace27dfbd063b5902440709576a6e
- SHA1 622d424c1b3061fcfbe9982a65a2d9b8ba7d52b5
- SHA512 aa6d669d32c5c5f0d75291331370b31a4ffef72dc31ea1aa35db7f07dee50ed4d58f803484dbd68f459560e9ea545f24e975c6cfb06bdcd6e3fcb1213cf7ef12
- TLSH T1B93147502FF90614F3F78E7394BB5B2085BBB86A8E20C61D0155464C1072A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.