General
- Target DOC-NZZ1QN.zip
- Size 588B
- Sample260803-qqsdsscj8y
- SHA256 748f876b530eaf29feb4976f6de2e24b4957d050e73ff074ffa6778b6737724d
- MD5 78e609d6bb159d8b5e906a654ef64833
- SHA1 78f4fa2c3cfc6fd2b3df04e9842d443ce219dde2
- SHA512 d0751f77f7c9a38a1bf492e75ade9afbf248e1b2e4b9166453ee50b1097adae6d745e33b5be5c5119414a2b24b206526a6ce94104c0ef3fcda59c6c0cb7b3830
- TLSH T16EF04124423465C8EC478478B430379348F3C887939B054024ABE6CF09AC2620E714D4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NZZ1QN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NZZ1QN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NZZ1QN.lnk
- Size 1KB
- SHA256 f6d4adf73278c22a6a1bb7d720a28e6bdcf32db5f3d38f64ea06e3aed459afdf
- MD5 ab7b75ba7b2d08a6062baedf7348fd72
- SHA1 52b1183f86ace764c38b330bbf0f02bbde3fe537
- SHA512 f87f52f2d97d59680c5192a21d35e95eb2bd828357675f33f3f9655bb2946aa5641dc727baab5bb2bf13f560c6083afa5e3e3f0342f69e8fe7a3353c730b13df
- TLSH T194319E503FFD0614F3F78E7794BB5B2085BBB8669E24C61D4141464C5032A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.