General
- Target DOC-ZLGMFB.zip
- Size 587B
- Sample260803-qrnf8szdnf
- SHA256 98822adb148af0e7a70d1fa7d2b8c7beae05f4b52769072e7002690cc05c4a1f
- MD5 578b03b4e049f590fa5824d2d1be91ee
- SHA1 179f188f5230110ce7920448b677fbcb1161a88b
- SHA512 ab90b54a5a5b8aada68d9f3507daca27943b40745f45122e3a5c1e30c090f19ace1e5ab83f8f2fa183798e1224d0fcd39a26f9e1fc4fa698b4ad42221aca000b
- TLSH T102F0E16217A5D342C646D5FA723573B8880C5251090B9C7AC568A20D7C20A8C9C19C6E
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZLGMFB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZLGMFB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-ZLGMFB.lnk
- Size 1KB
- SHA256 612288d96cf170792f0d63c63e7265887ab12aedca94befee24cdd587552b945
- MD5 595f92b26beff28bc30f5ba7a0d3f60e
- SHA1 11738cedc415c73b13fe29b936b19aee1c5860e0
- SHA512 36628bb3970001576534057dc2ec4c525b8a01e79899dbfb4b04b618686cbf1cd245ccef8ab34c388cda1af9355676ee89691e5656ef4355a3713e8feb6358b3
- TLSH T17D3147503FFA0654F3B78E7398BB5B2085BBB8568E24C61D0141464D1032A18E17AF7B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.