General
- Target DOC-JFR2R5.zip
- Size 580B
- Sample260803-qpxbcscj5w
- SHA256 f8d91148fc2a310891b3205434e23a51af014110b8ad8d91761ec332b34841c9
- MD5 5711592459c0546700f90acf6aca0521
- SHA1 4ea7f3bcbd3b247f54c7df552b1fb378b9fc0d94
- SHA512 62066679108a4705ecafe47b6a042c5593dedb2e3fb50670d2442e8ef11459a1a3cf52386113b0d15e452ac329a8cef2c4dce2f05cbdc4daae89af0ee2e2b937
- TLSH T1D1F0265107C56504D41B63B7F407371D427B10680F3C691A8E5DE6AE194F5D94E0CF93
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JFR2R5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JFR2R5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-JFR2R5.lnk
- Size 1KB
- SHA256 8f8c3aa97c26ecc97bde4315e964d4c0be83eb1f329030f26c5d6107cb5848a1
- MD5 ab58d0713fe590958cc60d9a47ebe559
- SHA1 b52c45be53bb95d45d05f83fce05bb4d37e7a387
- SHA512 c86a22eeb6bd0bb52b1e5ec7f708e60564f548d564d2c2021702ee3c410089bf8fc8e2d55425dc3e75faa767b92a149a6c9cfb5c92851ec0f46d9375c2e82a16
- TLSH T135317B603FFD0614F3F39E7794BB6B1089BBB9968E20C61E0141464C1032A14E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.