General
- Target DOC-Y8LWU6.zip
- Size 582B
- Sample260803-qpp72scj31
- SHA256 009c881ebe47bf6e8fca811a2c86d6a31731cf9ff8869fb864fe24eb6c6616aa
- MD5 5e733ef00562fb1d63094d359b7b4a9c
- SHA1 6f5c05d261c5c95a7819ac7397e52f84b1ff296f
- SHA512 21325037e01c3c36865bdac40e7d06a95f3ff6d569d7f83d0c717538bc47abbe5915d59931221923db492d0c0baff5b47d0c813f7d04eaa418fcd2acb3928970
- TLSH T198F0E197434D428DCF6180B85D567372949100CD033B59B53A21B1452E697D26FC5C51
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y8LWU6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Y8LWU6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-Y8LWU6.lnk
- Size 1KB
- SHA256 cdb89aa572615af62a890719065f8f9f2288d19f0b0f2fc416afaa1f9d8020d2
- MD5 3fbf9f9a0f915d379fba9a73a8700b51
- SHA1 a993194b953b6df007253fec2cba8915716e03da
- SHA512 d94b56b1ef8beef4bffa58aabd2857f5f888b5919dbcf545346f4001fc8170a405f07dbb49bd6fd409739a68522c859b331767d98c9a60373612d07c9379bf03
- TLSH T1E3317B603FFD0624F3F38E7794BB5B2085BBB8A68E20C61D0151464C1432A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.