General
- Target DOC-1XK9O2.zip
- Size 592B
- Sample260803-qpre4scj4w
- SHA256 eb424fd25fa6111606dfc4be9476724abadecab0eb01ea1a970c00b1abb1ba60
- MD5 07025b2d07e8b8c102049f5c20804d05
- SHA1 1c16bc3aab602c0d6ec3bb8aa327ca335d5257bc
- SHA512 a1f593a839c67f3593ccb76cffc64abc10a763a04b3454cd2e20e27219f0c1eea9125577f2d3aa11d3abe8c747a47cc4adbdb3e7826415af95a2aacf4a3aec07
- TLSH T12AF020F9D15417D2E39DCEFF2726634E9729C25111C1A20D46ABE4909E430AB2A7F154
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1XK9O2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1XK9O2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-1XK9O2.lnk
- Size 1KB
- SHA256 d25e4f0caf2a42c08e9ab5eaaf1f2154f21d92afe7b9392112f5e158265e583d
- MD5 538052aec9ddc98a16afbfe47aa247e0
- SHA1 e75ee01da512c10a5bbe491a8091e044aef6b0e1
- SHA512 2c6d5d122fda6a78845b8bb94f3fd6c606469f6e7274be7a622f01861e49d021b0e974da032f68880081bd71e034fb6c9798f2b0aa5b38d76dccc065a8b732c7
- TLSH T1933164503FFD0A54F3B39E7284BB5B1089BBB8668E20C61D0040460C5422A04E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.