General
- Target DOC-L1D1FL.zip
- Size 589B
- Sample260803-qrr5eszdph
- SHA256 acdbb0645e7be9886444bd201efc2a999d671f665b5dd95768606fdf99be53e3
- MD5 fc9014023bf75bdd0b63d7f03056d177
- SHA1 6c5182ecc21085085ed8753732545e912fd4080d
- SHA512 352ed14437903de4dff383daca38fcaf0bc9d02dc3d2ca174ac265dc2a791d051d693d563a2507edd101db1925d64efe34b8872fc71a7584224dfb2b1bb29ef2
- TLSH T1C3F0E7D3D7F40376D99354F7445328BF1D04E870470896766DE9EC554C36DB1074C990
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L1D1FL.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-L1D1FL.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-L1D1FL.lnk
- Size 1KB
- SHA256 020d4e2f56a9224c27d42b36232183ade970b7636af9eb261aa11bed9b45aac9
- MD5 4964a579d6dc92272d028fcb6da3d12f
- SHA1 448a1e21b70d4846293da9ebafe7bf21fddba987
- SHA512 c5b03a46face714fc1ca3249b70af4effa6e56251c629aa8296f8021c12309989b53c9e5872f7246278a603c3af95167eb07a17c3a42829284284f7a89da2bcb
- TLSH T1D53197103FF90624F3F38E7384BB6B1085BBB9968E20C61D0051460C1432A04E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.