General
- Target DOC-LJBT6Y.zip
- Size 593B
- Sample260803-qrlmmszdne
- SHA256 eee7435f8cee3ff868f09e4fb2a802dc937d1605ce8b4a6beaa1e89f9cff4d39
- MD5 e3f8a923ca13b91a398004875111a9e1
- SHA1 5889fb49a3ce24f2bc20606844d77fc41a5bfd1b
- SHA512 cc9622c3eddd3ef369254234b1e0df2754008b4d535acc0f3832811fbbe1b98a19766abc3bf61f643c094c1d6c9250a8d40dcab756bca4f674bae3054cd04ff5
- TLSH T102F0411736854BB6C064E2F6B93018C508EBB24EC69DB7543910DB4D1EDA7DC2E22081
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-LJBT6Y.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-LJBT6Y.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-LJBT6Y.lnk
- Size 1KB
- SHA256 b5becbe1286f92eea32103ae39ff93b702df440bf8fbd2ddfa8debcc52b3d858
- MD5 3753e2f5e7d36f0c8a6a3c9adb664c94
- SHA1 7774fdb90ab717d8d1724d7ce701614bbc953af7
- SHA512 cbee7ae0084a01bbf245f758b7c0eaf1b96ec7a9e6150018b48d2a5b59d8a9838287b99a5dd433337690ae27c21e0bac337f4adc91d728759f8eb6923f8bffc7
- TLSH T11E3147503FFA0614F3F78F7398BB5B1089BBB8668E24CA1D0145464C1072A14E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.