General
- Target DOC-HPHSW9.zip
- Size 595B
- Sample260803-qs2p9ack6s
- SHA256 91e10d0217a0f2a21c5de397ec8d700e667f2d9d713e58f29448440db0f297da
- MD5 d7bdd30611d616600c313472b83d57a5
- SHA1 a5561ad840dfe1c59e264eb2ad592f28555be39d
- SHA512 bb597d2fa6237cab4006c3066c5ec5970bcc0ba773bce76d9f99765ab8c3318d18347c0955c023dbfb5048c40077cbe97ad1061595234547245666c2884e1e97
- TLSH T144F041310251A05ADC13C4743071A0B723138DD1B60E809DC2AAF411BCAA620407EB02
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HPHSW9.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HPHSW9.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HPHSW9.lnk
- Size 1KB
- SHA256 098544b2e2dc834c0cbdacbd19939a7dbb4c4bd6295de837247ce31b6f56488b
- MD5 7c4ad98e902e9c4eed77356d95029cfe
- SHA1 9ceafc87bc604ae2ea12935abab66b61dedcfb45
- SHA512 189f2c9f03ad618eaa16dd8b1829f22edfb7b5829c7a4af416c995e79d87c93017ab60fdee215e07577a27b6967f10a0f2f6fccd9f4a8fb084b68b664293e203
- TLSH T15E31CB003FF90624F3F38F3384BB5B2089BFBA5A8E24CA1D0150464C1072A05E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.