General
- Target DOC-BERTER.zip
- Size 871B
- Sample260803-qqjrnazdjf
- SHA256 b471e485c98bd161438f0109a1ccd18d54505ea91efc221aa69272dbe007728b
- MD5 373211c4ace392d07cf1afb5ba9b9c21
- SHA1 4dd17b7bb84b27cd19b5b003bc32773d4cb4e4b2
- SHA512 795e76d7a2bf64b676a96087d064b4792151236a7f9bdac23e88279e074d75a06b294e7d4e7a87330426eab61e827ab7f579b53bfe73897cfeaf950eb5d7f3c5
- TLSH T18811DA9512166C15F447D03E2567591FE7D5F7C5C40A3717561CE104D650BC83297430
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BERTER.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BERTER.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BERTER.lnk
- Size 2KB
- SHA256 4d80bea6f83a7fc676fb21ff58fb73db39d9518bccfd0849d2794dfdcce1ce97
- MD5 7af6c6175d55202c14aa891670a184c4
- SHA1 b019842616def9191cc706639bf6267ecb5d9920
- SHA512 94e745d676de365897905713e91aeadde4ce6cf2e5170f446bfe6f552e49a1d92d5dd7ae4609a0663b43abf861bc5b041549153857949e8b43dd3c43c04f34ee
- TLSH T1EE4132902AED00E8F3BB5F72DDBE679185BBB8266D60C60D0990824D1832B01D133B72
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.