General
- Target DOC-673BJQ.zip
- Size 580B
- Sample260803-qqz4msac43
- SHA256 c5681c7c0051e04ca61c275c0e46e9122a27f130104a5a0e8c8f812decc4ea4e
- MD5 8e4153c558193a153dd2550b0d75ab51
- SHA1 9148aca681243d6b362ff444e3f054b0d8f76b67
- SHA512 b6b40248fffeb66f25961a36070783919ec05c44ad464930013933b2b5738733e964aad774ef3c4128b384dde6eebfb2a80b137cad81039ba4af58769d384741
- TLSH T1DDF04B23066A3C06F28A8DFFA09721F201E9B3730A0EFE280DB0F18048C0880BF0F484
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-673BJQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-673BJQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-673BJQ.lnk
- Size 1KB
- SHA256 539aa238a92dc2919e9e2413d1d677dae93e4978fa370766099e6618bb37441c
- MD5 941b5f5051da0343b7d76d59753658d4
- SHA1 969c82668295de61b509aec2072d93cfa39f634a
- SHA512 b364e800041309a10010e961bf0a97217d84c1bf2da873d7a056df2803c2d0c67e6c76bbd935341bde54e1942179b2aa7f0a4a87465bd32f07460608d90a5a0b
- TLSH T191317B503FFD0654F3F39E7394BB571085BBB8569E21CA1E0141464C1432A18E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.