General
- Target DOC-0945P9.zip
- Size 586B
- Sample260803-qqa5hsab97
- SHA256 12a9d9b9128d9d687740e9e5f41387fc1e50dda0d1fda4a755b13a3644d028ad
- MD5 46d09a8c4e9f1053fd4692cee074407b
- SHA1 ceeca36f6b83ab8fd9a8ae98b4338250a47aa24a
- SHA512 0f8a304904b8a42209cf0b415dfba3c0d2ee27fba65d7309e7524bb2b6b786e96497d714275baac942dbe7290dc8e2ea95dd668f759a2a1d5b3c4ffb9e19602a
- TLSH T1C6F0416F3B058144C34F0874AC9C389ED8F51982440ACB3B6924E89C781C12D9207083
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0945P9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0945P9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-0945P9.lnk
- Size 1KB
- SHA256 cbe4247aaaceefe6414a85cdc1fdeaa55b244e5e7976e9464d887d92d4e581b8
- MD5 b97b7e579201860ce85aba1987b49dac
- SHA1 b43dc41a72ccce902689365d9b6988c7171bda2e
- SHA512 c17cc5814493789359e2414070d1e6c1043fdd63cd2e592bfdbdf1fc255fc7938e78fdd914f33796bbd13bd046ce5afa4d97e16758c4caa299ef9cbafeed7a0c
- TLSH T15B3197102FF90618F3F39E3394BB571088BBB8568E20CA1D0150464C1032A05E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.