General
- Target DOC-H5PGMT.zip
- Size 591B
- Sample260803-qqxzaazdld
- SHA256 425d11e55bdd9e758949f91cf0f1b75f0a68c4fb843fc38055973d3121aeaabc
- MD5 c5e0f3ef7746f8c59026d5f558eb1603
- SHA1 c1f23f6717bf29379bdfd28a506e6d9870d4f875
- SHA512 e7f790f912755218b2e77e1e5772a388a7cc16df90fe863f234856c41d4e52f701a28c8c72fec87174e4aae4424ed84abe6d0fa745ac3b0bf810c1bbd74484ac
- TLSH T161F00252D7C8A045C55D98FEC431870A81048C119608196EAD78FDEC8C28EC70552D55
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H5PGMT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-H5PGMT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-H5PGMT.lnk
- Size 1KB
- SHA256 987aaa4ac5c7397ac276d82406fad17baf6dfa067a8c73ab5433186d5eba9f16
- MD5 c31fa16446817c11094929bad94b25d4
- SHA1 2c1802e408878e6bab323336d3bf6867bb5771a6
- SHA512 5926a29010bf7b6dbffc0562439e32ff43fe474740774eecd50abbab800046fc4f17e7fb444ab3983ba4306b2734e4aae943996119752b7c8e2749382e5f5176
- TLSH T1943147503FF90614F3F39F7398BB9B108ABBB95A8E20CA1D0141464C5472A14E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.