General
- Target DOC-KJQ8JU.zip
- Size 590B
- Sample260803-qpp72scj3z
- SHA256 1a3147bc06621a6f37579620f7c829c176556965505b796a2e7776e507ed8074
- MD5 43fe3fd5e79ca1f497b2342f0d051b94
- SHA1 8c36a051d040445a7de51a7dd090cb2ca8b05888
- SHA512 abebb54f445809c95976b8098854440ec8ff28007d4de4215a1d17d2fe5768df452755d536d95dfa2ed876b01a6bf51225884fed3e358b257b2bf7631622f125
- TLSH T192F0E17A5213172AD1ABEE3E4A3B3113558012D6410DDA071BF0987DAFD5DD11642442
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KJQ8JU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KJQ8JU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-KJQ8JU.lnk
- Size 1KB
- SHA256 019f1ac651722e888d30c8bfa4be4b74d387d1a4b5965e0e1c5a5ac947c68077
- MD5 bc3ff76f8d2d1cd2ec94741245679bca
- SHA1 0ca4963fb5dd182b55af5f66091113a473ef8a84
- SHA512 beb92214180ce927d45ab09677f9552879e3700394654852001c275b461292c18711534b7513f94694f4d165044bbad0ab4e74ef7aead914b9d20d368d1c0123
- TLSH T10A3147502FFD0664F3F79E7398BB672089BBB9668E21C61D0151464C1072A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.