General
- Target DOC-TUDG22.zip
- Size 889B
- Sample260803-qs6dfazeld
- SHA256 9c693cf049797bfdf663e27be38941a390f0627b8811553ae4efab69fdc5938d
- MD5 d86c23c7ee340d915aeb5f1272d7e616
- SHA1 675b6fb2229bee246155996fe6b3cd4bfcc60060
- SHA512 834d6029df27834d7309a7b450802010c30abddfe2545ee842b79b0cf46bf8a4551c14640858e5721b99427fbe930e1f32b026764e69d99baec2c858d3425757
- TLSH T1E81196B267C59B58D248C9B19485F486908FBC65082D9607418CA2C94D31B5DAF24E32
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-TUDG22.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-TUDG22.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-TUDG22.lnk
- Size 2KB
- SHA256 8519de90eaf6ed5954e79539e6b3c714d43e86384eac799313a6865401c4883c
- MD5 c629c38d9732cf18a5b74df69d80d10b
- SHA1 c404fe8bc5feee82500f884d38e900c3f0c681be
- SHA512 07f6263d3d08d3b71622b7224d2355077bd75c4f5fa5797bf69ccceddc98155b5c4908bc32b8eba66adec7e47a02300062f9129b44b30b8037170372130f28af
- TLSH T11C418B503AED06D8F2FB8F72ADBE279448BFB9556D70D18D0450824D1422B01D573B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.