General
- Target DOC-YBHT5W.zip
- Size 581B
- Sample260803-qq2bpsac44
- SHA256 1bc126e7eb2e73634b6667157a2d36ada40feacafda2c907558ed42914295ada
- MD5 6d05524acc81712ec9a7360f91fcbe67
- SHA1 51bab63fd13ec73fe47d5b25158eb0c659fea6d4
- SHA512 b5cc30af593440f9e1e34c15e853d29055fc952a5fc11cc17e6466cc1ada4ec99c880eb1e9552d4d1c9f74f86707f4ea790332c1af1dd3f0c609b0c11b38d6f7
- TLSH T17CF0E15D1B355A15CA0FE078287E92BA03D654518F0786F80AA0B1CA559998D9F8E450
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YBHT5W.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YBHT5W.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-YBHT5W.lnk
- Size 1KB
- SHA256 e6be0bfaeac8461e8b94e803a3d672f82215fccc36275251818d63a9b5c57a83
- MD5 8d49305f969aa49129aedec072ae7e2a
- SHA1 bdde7db275eea8d737d619e22215b6de28b68fa4
- SHA512 17a1606d971c7fcf8c05cef8835c1fa317ce8bba0c679eb4cd27285f4d5c4f56a1b6773a57e88deb76f1f58e837d8a5d440561afb888249b73b925feaf990cf2
- TLSH T1F8317B503FFD0624F3F78E7794BB5B2485BFB8568E60C61D0151464C1072A14E17AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.