General
- Target DOC-0IW536.zip
- Size 584B
- Sample260803-qs1sysck51
- SHA256 731bafb8990995c3e2db47e41053d021e0ab31253539c7d2af3f1285aec7ceca
- MD5 7dc8edc033bc1c29fcddf337e0964125
- SHA1 4b98b590f631eac6f1341b8fdfe530bf076982b6
- SHA512 8797f67ec9e3ec9d45c66476e1ba8890c6085c913debae29e4023077ec814cead5a8e1d7eb7fd8eae7bea41671950aafc77325fd3f8ab35c5649593a7a7052dd
- TLSH T158F0E1B3050AA681CB5B83BE5DF731ACC45340CD441E2F9CB051E9439211A4716EB574
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0IW536.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0IW536.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-0IW536.lnk
- Size 1KB
- SHA256 617e6495991d19a63af41ff23751aba801340f75b625f7120865aa0009b44e1b
- MD5 f3a02685fac46abe62df9a484ef6fd39
- SHA1 a161e42dca6eec124cf6f88874400a46a1ba20e5
- SHA512 5164a1ab8c86d0a0fe1afb05006d105ebae8ba7db26a9ce3ca59beaf913d0a4ebe16c2d85795e538a2612fe1d697485a431dfcee430afe69995895fff50142ce
- TLSH T13E3197002FF90614F3F7AE3384BB57208DBBB9968E21CA1D41404A0C2032E04E9BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.