General
- Target DOC-SAH2XK.zip
- Size 589B
- Sample260803-qqdkmsac22
- SHA256 76baa75e865ec96c15475c1c930a87f75be3e159e68ffe8f0b3254437c1f8136
- MD5 78aaa80ebee9d61aba42f211c207445d
- SHA1 6823af41742e00c8f1014aaefd91eda8a97430d4
- SHA512 7db173d1fbef44f49450a10264e61ed0d71e6d92c2efdd3a8dcef8883da479a14f7702bb5df3421cc970d73431565a7aed4a671236b87cea9d46bf538bbb3741
- TLSH T1A4F0416FC316643CE1DA447E0A00326102A09353C02AD66DA8B4E91F1E13E69563BFF2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SAH2XK.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SAH2XK.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-SAH2XK.lnk
- Size 1KB
- SHA256 f6020463b6089b4936501a5d0b6a4660fbb57f85358c5fd1781be8645ef1254a
- MD5 b31045bf61e67568d904bbe9cc32160f
- SHA1 7132e5d81371291be0d5ecf57f9f68f3ff171edc
- SHA512 54454e45d7cb19b68c355e132ee72c0b198a7ffa0a2465570755d10725c54ba266b5f5cb32e5ea3a13b26668bcf99b18a7fc0fc320a441d3e3cb83d707754cf5
- TLSH T188317B503FF90A14F3F78EB398BB5B2089BBB9668E20C62D0151464D5432B15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.