General
- Target DOC-2BIAPI.zip
- Size 587B
- Sample260803-qs85bsac64
- SHA256 395aa447a33a082eeed2b29a9be96d9450fb2c87d1e78ad80e7dc2abfe7c3fde
- MD5 b9c183d1e31f93dd934c2ef76b778110
- SHA1 54762464d07069aaa66f11f9e7dcd72bf83c788e
- SHA512 2ef85145df2104f98dfd90c6357ae2d00a0833895a69360d0cf0230a11c7cbeb4085466cb8849f8fb9ad78de0eb72f57f5f32dd08b620046709d534982787bdb
- TLSH T169F0969392171068E843ACB841077BFAAF655270A07310C71083F58A4C8334E5744CF8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2BIAPI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2BIAPI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-2BIAPI.lnk
- Size 1KB
- SHA256 997799d64bf89c024182e513ae54682b6b2a699e584d9cbc89971f39a74c14ad
- MD5 de4f78f00b66ccc2d69a144b179c002e
- SHA1 e388eef4084038053df137f34a036fa0801dab4f
- SHA512 763af597d9b1302057a3a580762c9664501f45ff49e396e704ed585fd1f118d6c313e5288347941d3659e0e4c33585ebeeb123c5e7c0511fd3e6eef4084081b7
- TLSH T1933147503FFD0654F3B78EB398BB5B1085BBB9568E20C61D0141464C1432A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.