General
- Target DOC-L6NYOQ.zip
- Size 594B
- Sample260803-qpyjeszcpe
- SHA256 b367263bc7cc4dc287b22714c84766c372120a751ad6538962a258395f923b24
- MD5 f29c5a70db3d0700d3ad467a54c964f4
- SHA1 5d7d9de1f3c03506e519344a53243499c63eeef9
- SHA512 6d3bdf613768b64c98b92104b16770cdfef7f7567f300e43fe6794f05cddc6b800c5f4cbd3a44660995b2d8f2b02a24d5bd487ee0edac686cbf64c8496456e22
- TLSH T134F04183538D91B1C806D37D8F9194A6BB48E4423B0E9F06A32D204994E42CA3EB3732
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L6NYOQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-L6NYOQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-L6NYOQ.lnk
- Size 1KB
- SHA256 b6e6e87567c1dc0d45abf822d4c3ca4b504ba1791454d33d5eee5b927f98c7d5
- MD5 5313f2053c9e72c86fe86658f42103f7
- SHA1 9db1b22c4b9424ddb6f729b36dfdf14a3f8e662d
- SHA512 d8ceb1115ef3b6e4b21ac7bf67d272628cefca9c30435e0b9ef973dcc8bab629fc7a061a3c3ce70d3ea04256b2976f45447365e59c20024563bcd13106b23ac6
- TLSH T1BF3124502BF90614F3F78F7299BB6B5085BBB85A8E20CA1D0181464C1432B14E17BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.