General
- Target DOC-3ZEYLB.zip
- Size 582B
- Sample260803-qq4f3azdma
- SHA256 f29e79ccb992901473643c3bdc957796dcd6b6f7c536aef2a80c6e3310b635ac
- MD5 b481085f0aef41044257229cff6ee407
- SHA1 2b50f78d7cf4f176572d45db0ed2533ed081de35
- SHA512 7e73a0e426976fba67cee88c51edbf228ca239aac09a3fca053269398928fdc853cc4a818fe6a42c44f938274ea66a1c07a88c8f4801d263e84d5f3b78935ce5
- TLSH T1C6F0ACB34604421BC685E23C8D9E99B791A03051521423EB037AF4BC6D792770E963B2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3ZEYLB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3ZEYLB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3ZEYLB.lnk
- Size 1KB
- SHA256 5efe5dde1a9c9fce2a57dbdae5e4212f46b017d0fe87c094f9346373c2fadf9d
- MD5 6e457c5d3b37659253ef527a05bbf815
- SHA1 4c14c994b0ae3a7398ef97768a6a3aee1e08ee43
- SHA512 88c412e2e858768bfd3c2affe8cfb49142b03705cbacf0087d1a4d4694820f5e934da3563e2f12e2b06df611afb011103150351f1932fd70b653220b0cc7d810
- TLSH T192317B503FFA0654F3F79F7398BB5B2085BBB8568E24C61D0141464C1073A14E57AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.