General
- Target DOC-KQJXGP.zip
- Size 581B
- Sample260803-qs5rxazelb
- SHA256 4cc38458d2bacb3a21d173701450b38c943c4cdbee727d736befc9468e192e26
- MD5 1fafe2974e0e4b09abf2bbc0076197ce
- SHA1 14813a07e3ace68789c0a2e4b30663fca10ad83e
- SHA512 a51e7841f44629e01ff8789ee60baa6c0301712be84faa5fe23801e4a9eab75c0c3b95cb673390b053f8d8419664f02459ecd2fff17683e727c52d00e2f1394c
- TLSH T1E4F0E15226A8CD65D9D6C07C14E77428D6614729474DFDD56A00756C685298E9F0C018
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-KQJXGP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-KQJXGP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-KQJXGP.lnk
- Size 1KB
- SHA256 6aed113d791845146cb457a4c8b17956f15a475982ff29b323c91c47935d0382
- MD5 5fe0bf3b1afa2ca2fe5613d733e8ad54
- SHA1 0e0cc92b7f59ffa8cdb84d078973c8209f2c00d8
- SHA512 3612d23861d0c07c36f53ab11f44848b8da2714fa4bb671891cf4016d1673b95daf7a33cf17a1c4fd355cb985e7cf98cffd469454fad2f0c439d8a3631135c1c
- TLSH T1083164503BF90A14F3F38E3398BB5B1088BFB9968E20C61D4051460C1422A04E1BBF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.