General
- Target DOC-HBYZK2.zip
- Size 595B
- Sample260803-qpsceacj4x
- SHA256 5c57d690f8c5d50bf5bc80001312783b5d88300e629378cb42cdee78f0f66839
- MD5 1239be5f9ac7d4f871687842521d3d6f
- SHA1 c14b1f068b4306cb17b6569a05f53a86ec0ebd32
- SHA512 4523161881d791e1ca13e92f0b97f74f1a835cb179ae881f76a59bdb880784914d12cebcba7fc71166d68d19dbc9d2a83d1faef7098630745173f5a62d252347
- TLSH T143F0E1C689784607E151E57D787B33A4A53A9CE0644F475B09DCCD317800DC3EAC9ACE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HBYZK2.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HBYZK2.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HBYZK2.lnk
- Size 1KB
- SHA256 6a663f98e745e233f31dff52b0f8eb6c7f4e472f5caa29e46c6d965b618ecc12
- MD5 bfdeabffc820415968f78f5bbc500858
- SHA1 9c1660aaf529693badf8733ed646c66e5088991f
- SHA512 5cb8debf3ce696a7c20bf94366a5833e4cdd658eba57f645a41ac84f29a1e646e04c92ba93ae2f670557b71d1cfa95fcb65ff250b7a468449a931bab1beafc87
- TLSH T19B3197002FFA0A18F3F39E3394BB5B2089BBF8968E20C61D0151464C1032A05E27AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.