General
- Target DOC-3KHR5T.zip
- Size 587B
- Sample260803-qqfd8sac24
- SHA256 6bb67be8454d35888b5b4f27c2f741f91de6461092723b13662f1567e9a5bbad
- MD5 962f41b41d2e0c69d5200cd7e2b3d284
- SHA1 459ad42f0116d6e2c0ebaa5045b08e19bc8c164b
- SHA512 02e3736282121dbb5fd5ce72b272b852f88e7631df6c1d24914b27217c6ba08cdcf8908e4d4580df09657d61fdf03c3c70a13fc382e15853df29cb9c90b4c66f
- TLSH T15EF0E1D341F04044C495C7B27936B469756406E6348F5D2666B4D2AC19908FFE550875
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3KHR5T.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3KHR5T.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3KHR5T.lnk
- Size 1KB
- SHA256 c1beb63b7e6d6eb146732bbc1ac9d6eef36e736282fcc2daf1f8d0eaa74f37b3
- MD5 fb900f71cbf260d8d94bf89553faf549
- SHA1 91edcb76703206828d0d99410ec93ce955d3eaf5
- SHA512 563279cc742d75d0669b4cd5e59a5bd24ab18b38a38435ac927dd268e726dddbe835fca032d033a6f00dc3b059b6f0187364816a0485ce3a1a5d2194d5ccbe2a
- TLSH T10131CB503FFD0614F3F38E3788BB572088BBBA968E20C61D0140460C1032A04E1BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.