General
- Target DOC-X2DU94.zip
- Size 588B
- Sample260803-qrhwrazdnb
- SHA256 d8af8d63be555e1c9ae2f4b079ed5d8f710066120061e44b77cebc6d39bd1b78
- MD5 ac707a7988e8bc05ddcc853cfa1ae04c
- SHA1 7fd44dfb0bbba179f74aa01523f4d64bae6e00f5
- SHA512 3905d1917b261a157d221fe3021ea6e7266f8c2e6689741f16b5e1a66d6f2414b963d87a7eca7622ff35077759f0f1b9c6ba515fee8c597e0bca0051124c3452
- TLSH T131F00CF70002A870C68F91BA22152FB55211E092868BD686EE58C2280EE03A69B00521
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-X2DU94.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-X2DU94.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-X2DU94.lnk
- Size 1KB
- SHA256 27c47034bcf315fdaf71195dc82970ead72249d92956debf7eaa2cd39c51171d
- MD5 b726c053eac13345d01179769a13fc5e
- SHA1 19ed2fec9dcf4943cdf8d1bf2d49c9b4169e8b4f
- SHA512 f3e2355a92229f6bf61e81bc25720355899c23caabf42bf6212b85710972a8d6213a7671f6e8ae872b60fda7c40b26c3a8057f3553c24a3ff466ebffd0a8f0f2
- TLSH T1203147503FF90664F3B38F7394BB5B2085BBB9A68E60C61D4151464C1432B14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.