General
- Target DOC-KBMH9D.zip
- Size 585B
- Sample260803-qs3mjsck6t
- SHA256 8532e605ee3ca94fdcee876945d2f90400f3ec3f41dd20f89c618a605be2c792
- MD5 eb53f7945a8795bbbe49861e9bfc6a3f
- SHA1 3c4c74cc85c0f000aa29242995e59e56f3398c11
- SHA512 e9830f47efc1c738e6542069d4fa3874280f60fdce7fbd4ac986e092706cb8afddc08168bec1727110e54dea20df9dd906377b7887851033006583a30c7fe42b
- TLSH T188F041B30867F52AC6B300F388853967A40022CFE1752ED02239E26419924E20FDD1B1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KBMH9D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KBMH9D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-KBMH9D.lnk
- Size 1KB
- SHA256 7a18fbfc22a14aaeedd0adc6a1f79b87a58b3d0bbd3e5c78f4573ceaf0d5ae04
- MD5 31387456da826f5ffa3eb2ac803dae0c
- SHA1 15d8853c1768a1de0d990bf46af247aee5973fa6
- SHA512 c8d73fe3071651c586f635a313e85d76e25d00cc091bd261253425c6486c633436c1860fa693699a60479c1ecefe9644b0a2d3a35d5b212ee5d533f662c329a3
- TLSH T10D3197402FF90614F3B39E3384BB5B2088BBB8668E20C61D0141460C5432A04E97BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.