General
- Target DOC-P57OS1.zip
- Size 585B
- Sample260803-qqnqlscj7x
- SHA256 a9f7c356eaf3983fc8c1965b646f45045b78ac85e6806b8f75e0d555cf56dda3
- MD5 7a71395f774ecf4aa1108b73cb389489
- SHA1 5f69cf6b86b9fc14895f03a2c9c9615c8ac84911
- SHA512 da56c8860f42362d0ee734124d79ae11b390ae702b0c3a986138b9a531c9225030a167368c2f56a419c757e7a4f4d027b18b8e1bf9736de0c7c158f94b23dd7a
- TLSH T1E3F0E7076677DA6EC74E98B9784E1901DD1304C6450682D66769C9591EB0467FDC0BD0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-P57OS1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-P57OS1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-P57OS1.lnk
- Size 1KB
- SHA256 71d410b2cdd61dde2e936b3f82f55c5e35d7341c1211935456f8434cd364cd11
- MD5 6392d48bf63698866214c8899e55f5b4
- SHA1 8c915e4f1fc78468ddfb20e776855d9062cec697
- SHA512 6c959556a18aca35923365e416d7500586e94436058b6fcc7a2910f912b6d271e81c8e605839f71d08a2a2eab4ab2be0013b0717552bb91af62f077f4eae9c1f
- TLSH T14A3170503FFD0554F3F39E73947B571085BBB8A68D20C61D4141464C1032A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.