General
- Target DOC-O96GEC.zip
- Size 585B
- Sample260803-qqvtxszdkd
- SHA256 55455350ffd3eef5b3dde17b9eac1c534d45168e2de30317e63c6f18fef243c4
- MD5 cdd6b3c8d05a0ce0cd7b7a968d5f6277
- SHA1 e0b8bd12eb42349fadb53bd64fe233c9cb93cd5b
- SHA512 a33cbcdafe8063c85ac2d95abd78fcb5dd4ad09c3e34bec01dbb125cac681d9ad6bfcafdb8d275d8a94d024e0f40c1a6756c2c0c6bd796255e957d99bd345d2d
- TLSH T138F0E1BB43D354C8C4239535852416A7121CC06441862DEF1E81FA33B5883895F7CCA8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O96GEC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O96GEC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-O96GEC.lnk
- Size 1KB
- SHA256 737ddb44f869966f465b9665c2edf673f82d1d3936d76f58efa1e90eedd13fff
- MD5 2fcb23d54bd74b4c649c58618c4b6df3
- SHA1 afad276db5e96e6f89ed4f343256547779cfc0ed
- SHA512 3ff479e71966da7311ad2290df514b3059cf415fe693306784bf541ec00b9621d00becadf0db746bb3a108ac7c2a604ea0150937d62cc433c246f560b22d8c6e
- TLSH T1DA31CB003FFD0624F3F39E7398BB5B1089BBB85A8E20C61D00404A0C1432A04E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.