General
- Target DOC-ZB5WVJ.zip
- Size 593B
- Sample260803-qs7w9szemb
- SHA256 abd45f96cab2056718485cb35f155407b5ec927f1f9ca0fe3bfd100aee79f0f7
- MD5 92f59993401fbec1c0a22b99792318a2
- SHA1 ce3eef23e9701c88ae6677511789045f640f58e0
- SHA512 74a4712f3fa6fb5c22faac51bb7f168323ccf356bffdde53dfd0bc666fd17d81608ef63438120d9f4940c06a43edf16ea2f9e31fb6100dae5148a2f63002e589
- TLSH T11EF09DF3D1456841E93142FD5A2938C1D117587171D56343437CE3D1401154B7B7C540
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZB5WVJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZB5WVJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-ZB5WVJ.lnk
- Size 1KB
- SHA256 81193d5f879565bfb616d1e4e0c498398ab63a177713c89c6c459b4808a81865
- MD5 e7eb14e8edc7936a8a1455aa537cdcd7
- SHA1 76c03e14b75cbcda8e2f2459ddc6c3164aedbb27
- SHA512 ea583d1ec7f28e9db76298aa69f88be4e07c9276c7f0f00d8c0b81cb446f3cd06f8e74b2ad3bfb97d0bcf9a5448fc606a5d386c81f7ec682aa973a05bc251d8f
- TLSH T14B317B503FF90614F3F79E7398BB6B1085BFB9668E24CA1E0151464C1072A14E17BFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.