General
- Target DOC-EVMZUJ.zip
- Size 585B
- Sample260803-qs5rxazela
- SHA256 63c9e1e7ccac947c27de452b46721fd317fc12fe0b3d80b93fa454b3523ee0f2
- MD5 d86e89cb00cfc7a5afdd5dcc4bfeaa0b
- SHA1 8382810a19344c1b32f39857221ce2e22638b14b
- SHA512 6190870a6445dfc2375f16bb9236dae87c3e75fa5917118054c3ef0a5ee0103ab0336b9bea2fe5023a871ce6899c2fb98f1ed2633716b496ef527cc9da8f72bb
- TLSH T1C1F041FB518B68CCD718E2B6EB26028A32906BB0D405B7A14720C8BD49124361B60541
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-EVMZUJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-EVMZUJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-EVMZUJ.lnk
- Size 1KB
- SHA256 7324c35ef50e76c7b838171a0ebac6a0ab79d4a55ffe73ebea1667c9814f04a4
- MD5 1acaf628d722db2bc791b0bb7fba8e29
- SHA1 3b261d2fb72836b1a401778d7ac036143abfebe5
- SHA512 b7cb18784ea083af98557d38e610a2e872d6ebf2fefa648c843ff53f3e3e52c1605e172ac9708d55f37209b1f1625dbc75eb4982924b1f86a683bb62bbeafbfd
- TLSH T1973147502FF90624F3B39E7794BB5B1099BBB8A68E20C61D0141464C5072A14E2BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.