General
- Target DOC-M086GH.zip
- Size 583B
- Sample260803-qqxcrazdkg
- SHA256 47895ceff5d2b49e25eb8ad7f16512f60843c043db2f3adc01d0a4757d07bd6b
- MD5 a4493fbed11785c223d8a302556c71fc
- SHA1 f3337a5b38c6df08c9329168208eb82e9344641d
- SHA512 4402ee63385f090b43f6810e885b7afd908dacc8e097cab0b0eb1c18933ddea7d154bc19426eddd0bb5c3358b11b9c2aac3d042b918fcf536d0fcdc6c4f40fcc
- TLSH T158F026D331179208ED04403AC85A46E4D24D7F40C429B6E6997DF9D41E99884C801076
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M086GH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M086GH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-M086GH.lnk
- Size 1KB
- SHA256 18a13b2d5b1b888d042374b2e9bf60e5864c6d9f146a403a8ce3eeb019e143f5
- MD5 bd1731a00b4efedb9e29951094cb7009
- SHA1 30076876ea2bcd6cf83f60a423c4634d80e973ae
- SHA512 c4fc194cc114255049019d38640212a98cff77bf13078b176f56da2a0861b5e1ac1bc105bd4762fcf79dbccaa9d973312e34a4337075935df27b5b3425b5ec02
- TLSH T1603147502FF90614F3F38E7795BB5B2089BFB9969E20C62E0141464C5032A15E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.