General
- Target DOC-SU4LQX.zip
- Size 586B
- Sample260803-qqvh6azdkc
- SHA256 af7cb7498149c30a29e17c37caab044dfbaaaf0785a917153b8201244f0216ca
- MD5 14fb9aa106ae1792801c3b72a704d704
- SHA1 a156966f65d64451f495d57d2869b070b2bab649
- SHA512 bdc86d5493bf37f3110049bd965b4a398bef2e2979c6ed14aa2d9e5aefc50b2d173d83fedd9e28ae8e1e9c02aad8afcdae6ec91f49f227163d8185c933c62c72
- TLSH T1F3F0E1871083DE1AD019E8FD6522023B4D9DEA2541FB1299948CEDA845DA2AA6C070C1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SU4LQX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SU4LQX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-SU4LQX.lnk
- Size 1KB
- SHA256 51f43087ac2cbb8894e1bb9ad246ee92ffbc5e689b7ea5df7ac57cf4ba7b5908
- MD5 840e32c34f20acddd11157d4e32cee92
- SHA1 12228e8120fe47ccd098dbf59b39b9d6cb193fa9
- SHA512 82a09701cfffbe1a724c7b31cc6e1c6b1a7c000da0c11ca4005e0e801735408c731478cb8bf0d11554d13569bc324ae7fe8091d29946042770b7b1dba6d229d1
- TLSH T15931C6003FF90664F3F3AE7388BB5B2084BFB8668E22C61E0190460D1032A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.