General
- Target DOC-XFNH0Q.zip
- Size 876B
- Sample260803-qqb2ta1sh1
- SHA256 1f36e20bdb8976f8aef3e7af3fbc9e3b95b758587f92e764ea33dd4e0df38647
- MD5 2f43ea455e590ca373997e4b32422305
- SHA1 1c9d417b1014b94b83052b4129f4073ea81abd8a
- SHA512 47dac75f1989e936518c07b8073d80ec7c36ebc87aa35adc7430318f1a7c8b1ce2774fb74e426434d88b6b4a8e6ac05abcddac8330f2cfbdda4c356f3c21f7d1
- TLSH T1CE118A07474AC470DBC394F44B65401D4196E4DEE8DF26E98E24D364ED57770D4DB514
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XFNH0Q.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XFNH0Q.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-XFNH0Q.lnk
- Size 2KB
- SHA256 f76c549c219f36db386746aae128d452f78068b253499d1e0a8978aa07b29607
- MD5 c821fe92d8de93c93e924a3c8d44d628
- SHA1 47eeaea897f8d82da7b37f6918745e171eaef14d
- SHA512 72a7bdc72883738d0e461743dda9e9ea2a240599611ee81eb21abe62e95aa6254c0f5016f4367c3074e459e0462a857e9377f111e4207974dcf360c58167ec6b
- TLSH T16F4124807BEA01D8F3BB8F73EEBE275049BBB8925D21D58D0440924D1422B01D4B3B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.