General
- Target DOC-7638O8.zip
- Size 584B
- Sample260803-qs772azemd
- SHA256 cf22d63012a3b8d563322c51897e83c5d428ebc848e6c0fb90ba274ca6059a5f
- MD5 96308c5224b32871d9657027bfbd8cfd
- SHA1 965fae1f7ef19c7ffd09be1637700203c4889235
- SHA512 1d1584edcc4833b2598179c0f1caf2db61aff70e58ae1a0da2564ce1fc12fe9ed56993a88331509265154e30f5f517bb3bc44216a9b8f7729f4358b6007626ce
- TLSH T189F0E7A2E355A734D45449F8182390A6510407810F1D7296E1D5EE0E19294667B1CCF4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-7638O8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-7638O8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-7638O8.lnk
- Size 1KB
- SHA256 9d32920ef0f73c029c125bf73bea198dbcadd04503a30fdfabb2d0f9e7050f8b
- MD5 78759524a864da5ef93644649ee7c93d
- SHA1 7dec88f0cff57f301e277ddfb7b26ef386e92adb
- SHA512 42bcda3849ac2250aa01e68b11af4bb37091be8a680cb132c44ba9e6e08bd7585741a67dd937a9433b660a1d5ae271420e4e88fdd066cd7b2c0ea152188747aa
- TLSH T1C1319E503FFD0614F3F78F7794BB5B2085BBB8968E24D61D41414A4C1032A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.