General
- Target DOC-0WO94A.zip
- Size 840B
- Sample260803-qq43lazdmb
- SHA256 83d11bd5843ee016fa08acb0cec1a9adf57458921cfda38b7f9902c4c88dbffb
- MD5 ef744008c494ac7cb3a38bdc34f376cf
- SHA1 3d35cecdd1cea17b04cdabfed42871099b6f4e7e
- SHA512 610296aff387eec0f3a5eacbdc2511e37cc10896c36017a533662d7daecc784a6c475154247a1514c5e1a0df98b386dde6a5cdabe086573076d9efe137340fc0
- TLSH T11D015633F1466410F5D427FCB040E28C41B3B644094781B4D5A6A9EABC486E14E15D2E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0WO94A.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0WO94A.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-0WO94A.lnk
- Size 2KB
- SHA256 44479f0ac05034de93f8960d5648f1dbe11612a275d56712169be26996f76fde
- MD5 2539ea9665859b1c68ab752436da7bf7
- SHA1 44c849ee244146851cb3944307e2debdc8b0eb95
- SHA512 e73bef19a6589203c1c7b0405a15731d481ecba568903b75ed57c6ea2e6b5e6bf950ceb2088a5bfa6bcf3d3df58a39e48d5ba10a89cff08be3010c322b819daa
- TLSH T1704106913AE905E4F3BB8E33D9FA675189BBFE415EA0C54D0851D20C1821B00E877B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.