General
- Target DOC-1MQU9I.zip
- Size 580B
- Sample260803-qqcy4sab99
- SHA256 569f279a31af009e02ba74ac1c7822838c3a043c3c07f280021be6782d037876
- MD5 4230133c0f2bdd93b808f2af9d73fed8
- SHA1 e2ae2f7fc16f05e1183b99f6c6fe5bfa740430cc
- SHA512 5303924ea212a953bb3f473df4dfcaab0f5042e7f9fb0af769e415c7cc0ea2d63b9a393387e0ed400c998081c20d24bd89417ec32f3de8462c6878876654e1ce
- TLSH T1A5F026B12539C149D797C77904AF5F513D55B1D6251CC64118F0F66F243C5081B0D1B8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1MQU9I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1MQU9I.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-1MQU9I.lnk
- Size 1KB
- SHA256 3bf031336bbe55eed4029a2d495606c781259363e711d461836d2834df874cc9
- MD5 ee192ce7619f103b38c37ba0aec37978
- SHA1 e58421d850eaffeeb605184c387318820ac312af
- SHA512 24e399b396244193cae9192f7b70ffea8b92f64b0a4288d18fcfa0f33b64f2c6c1df27aecc9a99ad21af0fe737941f46c9fd6fd5fe666d76ccea3418061896a7
- TLSH T148319E503FFD0614F3F79E7794BB5B2085BFB95A8E24C61D01414A4C5032A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.