General
- Target DOC-EYTB0F.zip
- Size 585B
- Sample260803-qs46dack6y
- SHA256 ec8d852d31168d3066d216d1294a6ea8dd43e42d5f9bfa9b8479bc2653793011
- MD5 7aa1a13af9454592576ce5f23a5d3851
- SHA1 4144024bc3e7c49c4812d0e9508dbb2a85f410ef
- SHA512 5dcac1c2ace11cb553e1aa7ef785a88e18b5fa99901ef57631931b7784b1a54bb38740d8c392c5f680a199b9e24c4cb4fa4fb550022541aa5c8ee4ba66f3e342
- TLSH T1E4F026D5941FD14BD553CDBECE2317B28E55A903364AB80C16397C84057855B9F0D658
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EYTB0F.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EYTB0F.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-EYTB0F.lnk
- Size 1KB
- SHA256 b000b840c00318adc48c5cc449213538e70aa2cfc3009375ee5699696998fd16
- MD5 076da654964cd35504d668409cecda16
- SHA1 3e016f886a791926e748c365dab9bbca566bcaad
- SHA512 61dd8a31cf28012f74d5ab66b664effbdb1ba1848aff1c06805655a9c959a9679e946e64d8aedfb4a5820e3b05e66e4e07d766fc3c2383d01908cac282ab9b1f
- TLSH T1A13147503FF90654F3F38E7394BB6B2185BBB9AA8E60C61D4141464C1432A14E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.