General
- Target DOC-74ITAS.zip
- Size 593B
- Sample260803-qqkc7aac29
- SHA256 06afc1def403355719ee8aa3014243bb46f8cef740a7c3f0458ec6c12a38a8ab
- MD5 91aa9477de4c81765e71cc0540e3a9b4
- SHA1 055a6564218b3f386a640ac5e9979a8124fdb6fb
- SHA512 8f284672f6a8287ce6d4e0642bedbc296b26e9a803deb5e266fc0c20e98bd0cabe60211c2e4ef2620c5f696aad03ade72db63225b961560280a9422830a61f35
- TLSH T1B6F04710CA5F119CC44229B526138822852F4407134F255F291DFDCE5E951752F4E638
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-74ITAS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-74ITAS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-74ITAS.lnk
- Size 1KB
- SHA256 4d471716bddd7865207e7f7eb1fbdbc0bded5945a13bb750a30799e38c7de28e
- MD5 cdb681197707844afdda7d9958ea4468
- SHA1 81fdf9071c1ecb73e3c50c20ee31a9ddc0409af2
- SHA512 75959fda51c43feeee22e8061e29476009b1e27f7082916f60d2b79d465b32f2cda69bce44dec01005b764c2e72a06bf5a648ef2ab4c340d4a9bca7f2221aa80
- TLSH T1DA31CB103FFD0614F3F38E7384BB5B2084BBB8968E24C61E4040460C5432A04E27AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.