General
- Target DOC-8DYHH4.zip
- Size 917B
- Sample260803-qq5dcs1tdt
- SHA256 5d4abbf9eeec1edef12e6d2e358a87df4eda4d65e2d653ae23421e26bfc61ac4
- MD5 7d95aa17a7ebde841dd9c70aa9f1d8de
- SHA1 ee1f67337315e2093a623257e6d941b78b2f7da3
- SHA512 9e655865174bc243bc1aae9cc492cbda38bd23bb3a8dc5a4f1c56b8ec00ea05f07482b5dc692efb6f2a6906b9d85ac23df651cfd035c9cc1b4674d53e0f39d86
- TLSH T1431163BE6212F811D0410AFFCAF05348DAA5C340780C9602116F876E6AFB08858EADA9
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-8DYHH4.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-8DYHH4.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-8DYHH4.lnk
- Size 2KB
- SHA256 721da3f7aa98c77c31bd64870ac534ab93cd890e1963667ec1fc27b75992dd74
- MD5 e6be421186c8d854c22399933b6ab479
- SHA1 b6f8a55bfcb76c2ced563634c9c573de62f92a13
- SHA512 9f171ba0562910892451e2fd958576adde9b86fd9c4aefaffbd205eee5a40c49e86054b68ba02f7cdd1816010e6af48eed8afbea2fe227eb2fd6e59af6f21b9f
- TLSH T1E8415A9039EA01D8F3BB9E32DDFE274449BBB9919D60C58D0C50820E4426B01D577B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.