General
- Target DOC-HIK12B.zip
- Size 946B
- Sample260803-qppxaacj3y
- SHA256 78d9491eaec676d7a3a4098a69f8734abc1d41de04ab8f103e5e90fa593b41d4
- MD5 3e90ac8e1cd1c1b791fa7f8faa0360f7
- SHA1 06cdd7624e9b4f9b533b12bb198f406f5a2c2eb1
- SHA512 f881ddd057eea52c41607c3dc4bcfae1f11da642ab38e1c6c878e96531d9ba051b526e06ec8c82c2bbb5b9889c5af20a6c2f60a39d7c351a97aced7fb32ce487
- TLSH T1C311844F1244A5B6DF21C2B938E869E7C5353102F159E24AC6FEA443B42F68779508B6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HIK12B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HIK12B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HIK12B.lnk
- Size 2KB
- SHA256 58dbb62d8a95905f55b2204a6e80c43ecf34720fdde0d1d38ce08754181394e2
- MD5 c9ce5a40d6990f7fd086e7741bbd92c4
- SHA1 def362cb80df20e6fde51831a73636362e47798d
- SHA512 b66fc0cbee1af99b98c7a1ce07cba0bf7f4c9fc7cd2e42f62c6cc1517f365376ebb89db79c36691053684bb2f07b0095762f04a2003f1902b988929718d27b17
- TLSH T18F4138903AE9059DF2BB9E76EDFA771248BBF9525D60C69D0C00814C0822B14D977B23
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.