General
- Target DOC-I8KE3T.zip
- Size 587B
- Sample260803-qqwffsac37
- SHA256 b5a84800ff7a32559ad6b2d5107ea76dfc492821bce313a2b6a9a1ecf7755bdb
- MD5 87164644ccde867c344ecda0cdf5f2f0
- SHA1 f063960739e1662ed44dff58fc6a0e7839a7ad4e
- SHA512 d406fe72892097fe7560f3ce00ed5d38f174d29a83c13c76c5d2cc03443415dea1de94ca0be8b80248fffc01a027283c683f59b5f8cd5941721bf936d7d18de9
- TLSH T108F0E1738A20A5AAC24FC53A805368140D9E16A84A062BAA566DCC6F5AB498DEF5D0F0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-I8KE3T.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-I8KE3T.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-I8KE3T.lnk
- Size 1KB
- SHA256 37ba3862eb51754ba5e02861e3cfa8f7da4a2c17d1a62f521f971fa2c56c1899
- MD5 7cc6327266fbb71d4e4d9dec453bf087
- SHA1 5c39bbe3fd5e9ee8fac8afcaca9638659b083bf9
- SHA512 9b9728f0cb7e058482433188effa536a6a19e289a5813337c06f30f9232f840f352baa97448a2b94dc7d0abbab4887c0b63078fa8e77b945be5ff7e91c00dbff
- TLSH T1EB3197103FFD0A14F3B39E3398BB5B1088BFB8968E21C61E0140460C1032A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.