General
- Target DOC-BP9Y8B.zip
- Size 591B
- Sample260803-qq281aac45
- SHA256 09cb9dad0f6ac1a0fe06458072241bca1a35e3dd5d08cfbd9bab8b04d0a6a8fd
- MD5 8859395fa25e004e39eae63048b024d3
- SHA1 a2079cc38658ed47a61e570059bf7082ca15f476
- SHA512 d0a5fe15a36cd2edaaab726e27ecdd06be8751d1b66dda603d690c42176f2978b28fdb2f244e35af21f89b5136a1d175ede1c3fdf0b8b9bd5541e82096b2d305
- TLSH T149F0E77767A98919C19CF17D868301C3C7314C0E6B4D7F97F66D86249B50E597E19032
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BP9Y8B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BP9Y8B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BP9Y8B.lnk
- Size 1KB
- SHA256 2f98be8d95cf1f3d862a361ba5e6bfa160a15069471fb2e56089387d688d05ff
- MD5 67e03d0a4e7252c4b668f8db5f60339e
- SHA1 908983f736a4f2bb7cb9bd2725e32e3da52347a8
- SHA512 7959b9563f602301dd36acc2b71f0206046b56f48083314b4663541bc31b989d8980fa00c839c33c17676f941653f2e73cd59faa5d1483d8abdb5386370771db
- TLSH T1AF317B503FFA0618F3F38F7394BBAB6089BFB956AE20C61D4141464C1072A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.