General
- Target DOC-P8HLKI.zip
- Size 593B
- Sample260803-qrjs2s1tex
- SHA256 0d1504d1d19e48676e22fdcb663e997017a2f6c087732809a7cf03f711f1b0cf
- MD5 3513e2498a43b333c3231a0b402f51ab
- SHA1 2cea7fa5d05d0f95f1cb0e931d722d42945ef69a
- SHA512 845e28a2a17ae00998a4b8cb37e2174f56ca2b97505d47b716ebed097f13389563b999b34b211ed650cb90ee6d813bd076f132dd7e970625b379e3a2f1a38a35
- TLSH T1DAF04791573C0624C94A04BF733E0B5E3535E4426B373A6F6646F04F1D11C06C90CE6D
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-P8HLKI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-P8HLKI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-P8HLKI.lnk
- Size 1KB
- SHA256 c6cef0d35440c389cb15464f6232f38808d9c342c7cfad44443d3ed8a2cfdbf3
- MD5 6126e99587330c89b932f6165d47f9c6
- SHA1 6aff34d2ae9b680d3e82279c5794ad918608f8e6
- SHA512 0f6bd3e6c6e32e6220b62ff5079b311108b03d68c385f12897b2106bea85e53e2523a5042ae87bb42687e1c753990fdc7803a6805006f1eaa7b75be32cdeb113
- TLSH T18B3197002FFA0654F3F38E7784BB9B2085BBB9A69E24C62D0041464C5032A14E1BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.