General
- Target DOC-G69IAU.zip
- Size 933B
- Sample260803-qrfrdscj81
- SHA256 8e537a80bce271f502615ed8b36a1f7301d7eec007de964867f6b651e33b1f0d
- MD5 8570c166de570f2658b5dafc72bcd456
- SHA1 2fe3fed603f5ccbdea3a35c6479fd361ba8dbd23
- SHA512 2fddffe98883fbc9908152a0c11330e24a8eaffb8428c58d0f2386fb6b8013659257432ac48c199d643705f15912575096b228c9314c51fcf2042c63c90a3bb9
- TLSH T12211887AD6B438A5D5808235984B7FC90F7CD308B24ED48D142A5BF8BC57584974DD14
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G69IAU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-G69IAU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-G69IAU.lnk
- Size 2KB
- SHA256 68dd966bc6f2075390089881da1e87a63d73b873d9b2da5e2ea0b859001f5ea4
- MD5 4f76f3542a742f2259d8671e5dbc249c
- SHA1 3c5cae8c4cab9a56dee0a46b0b4464d586432eef
- SHA512 4d06ae38f44da04026caaccb9531b899e2a8b3b235a433ee0891d4c62e3fd066ce628e7d09770da53ecb1ce68586a854e0fc333f266f3a71ab53b27e2fb96841
- TLSH T1514123902BE90199F3BB5E36DEBEBB4189BBF9526C30D94C0850824D0825F05E877B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.