General
- Target DOC-HTLVIY.zip
- Size 584B
- Sample260803-qpefjszcmb
- SHA256 59a9b296ebe4a759d24bced575ca456b5377a4649668f339e083486b484509a1
- MD5 dc5749940da42565468deb50effcc2a0
- SHA1 f7257559d2689897e07a5ed8bbfa86577270ccc8
- SHA512 f0a5dc7901729f1d2f36832a86ad1b1b3b5a95c683b8b35f0e55f474fbcbb18a1df45954218ad08794e4dd625b707887a21a5ee702612554b2db0f018d186e95
- TLSH T10BF096C382E8C080DE51857D91421463D2362148924ACF02793EC636CE63717894C890
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HTLVIY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HTLVIY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HTLVIY.lnk
- Size 1KB
- SHA256 b318a635a7cf6153d6f260f4c136fb8edb1293a618143c138d475b55a2f5556b
- MD5 0408ce0b36723ce3cc0dc6cd6cee8df0
- SHA1 0de30d42a19888afd3f6af9fd47bdb326b8996f3
- SHA512 809c470ef2bab9f9f64bc8258be23192064174baee86ae610aa5c1ce4e9261d35e49abf39b04e0192da9defba7b26dedca22bb67831f96f2913ab5685bf7f6cf
- TLSH T1B53197403FFD0664F3B38E7394BB572084BBB9568E20C61E0044460C1436B04E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.