General
- Target DOC-O8MS70.zip
- Size 589B
- Sample260803-qpvsjazcpc
- SHA256 02be1c326d53f03bfd426fb4c1ad8173b85e2a2b54d3fcb9cf7af2236fd66685
- MD5 c59fc7d14e838fe688a3862a45be905e
- SHA1 ba6e151b757290f2f78f9a2bb4c2dcceaf7a22f0
- SHA512 d51c4f3b7a4f6023d03d445383a0d6b2957c6ef1125e40eaf9fed5a9923af1e7d5c0e74f75fa9824f8e2223f35e4cfc5bf4279296d75598bb1328225f12510fc
- TLSH T1C7F0965A02512084C95488B4D927A28A2773B1A3625D7A90C006EA0C5E4D3D7FF0A3C4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O8MS70.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O8MS70.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-O8MS70.lnk
- Size 1KB
- SHA256 658e2a85b2e4b0c87661f0ce9b092a6c0bdd6eed09743214c5ca73e6b23b9226
- MD5 62106e78a4a31022243d1b92e6ec0d54
- SHA1 351085982eeb87efc5d8be1f73d34d114c2eac57
- SHA512 041debabc4ffef7e0cbf9bb4ef9516fb6480d19822c8b0b382242abc3d90d1496af672ce75d951bfd707ac57bd9f0b7528e47b7e18966a8746a1a2c646b6a217
- TLSH T18A31FE403FFD0654F3F38E7784BB5B1084BBB9A68E21C61D01404A0C5032A14E1BBF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.