General
- Target DOC-57EQ03.zip
- Size 588B
- Sample260803-qpt61aab93
- SHA256 8162cf01990634ee3e95110ff154d40cde6358aaed56e3793f6e5706596e3021
- MD5 7ba210c9c4ac2355fd333ce217e59ab5
- SHA1 12f1d660f0980a81f43f237236f8443ff6104d4b
- SHA512 532feca8a594a9b1587c2f955e198aa575ef3e49f4bd2813a7898c0cdaf9cffc0e2431c3ed42b2654dedc6ccf92b5a0cf87d23162adb232600ada093eb57cc8d
- TLSH T1D9F041338349B815E032413381F33D3202BC44146F59660D09DFE2400E98884B16A8B7
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-57EQ03.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-57EQ03.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-57EQ03.lnk
- Size 1KB
- SHA256 477005c9ea4a4e33d4636bae885285f00b3dc1b01601bf4617df391153fbed0f
- MD5 78fe0ee7381f3999f14666afc5d62d5c
- SHA1 af87bc57b243ae137083bedb0da0adf26116be6f
- SHA512 9be2c03d3f4f16d2e6e1769ae2325a1b009a2b4fd9f6210d3e59ae1cd3d4d5b4989511823cd2009c753581dc3cb18cf28f328f40c89b8fed2eb43754e52dfb78
- TLSH T1373147502FFD0A64F3F39E7398BB5B5089BBB9A68E20C61D0141464C1432A14E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.