General
- Target DOC-WEB54C.zip
- Size 829B
- Sample260803-qq2bpszdlg
- SHA256 ff9df0b9f1a8cdf3e01afc89255eae7ed3330f9e5f1730526b49fcc4090ef302
- MD5 0f41a7a8dc94260a0d77a34045a9aa81
- SHA1 a09af11d5d08c7ba6f82520304cc38e3ae37333e
- SHA512 1430ffa0aa061d5b9cff9220223f4fe3901c6f5bebd68b54e97a3909ac72e2dcfb40c11952f925bce2431d8d0cefa66395229bef7b51299fa6c18d866c779251
- TLSH T126011227075F86C5DFA58EF1267999D18D21400006171BD394209E9056AE8E9EEE9414
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WEB54C.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WEB54C.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-WEB54C.lnk
- Size 2KB
- SHA256 bee7365332f68a236e9487c77db14223d5ebf09199949d0bb6a7339a6b05329c
- MD5 d8d45740630d96894965a84fca904be3
- SHA1 7869c664d3bb4f8a968d9d013c562c9d2a4b42c6
- SHA512 f19dec77ae9a697ed11b74bc9004ab4c168f918e3c2662bbe34ad72aa8cf25e246e639afa8f1ee4210529802622f01415436c9d025e0f5589ff63ebe3d17a54b
- TLSH T1784129403BFD01E8F2FA9E72D8BE6B1189BBB9616D21C69C4564810C1533B01E4B7F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.