General
- Target DOC-ZJ1EIE.zip
- Size 881B
- Sample260803-qs8hssac62
- SHA256 3446c9ff4502a14d09b98b432a581f0e20aa4631ee249ce3a1cc37b03cedd993
- MD5 5d68fc9f4c33e83ad428bb3ed4a37f4b
- SHA1 6decbfdbb249c842b12f0c13af977e590c44c6aa
- SHA512 aabbb78416c529904b7ac7a453a2c77a560aa0f0d4adfcc9508f4f470cb0892cf5d95e8c9e3def235970c9fef08163d1898690bb6ad6e0f71aa726697e63b04d
- TLSH T1F91156E615FEF514C53A36BE97269094A552AE80925E1E7993F05C4F3C031804D41061
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-ZJ1EIE.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-ZJ1EIE.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-ZJ1EIE.lnk
- Size 2KB
- SHA256 a93ac90d720bf9f700e9e5ad8f36a394f86edc3f1b692a29897e8eefcf154d8d
- MD5 b3c845d19bb68302f5f27b1a7fb0704b
- SHA1 f4d4c10b016909d89c695383fcf053adf2a0b39d
- SHA512 2f4b9e0a6f70097ac23ad9dd81ae4f0683a3dbdf7fe90c7ed728d89ff0c85972769c8d6e9a4b306a968596b1c93138abd6140faf27b6de2282c34cbfdd14ab41
- TLSH T11841F1503AE90598F3BA9E72ECFA2BA04D7BB9126D60C69C0950824D1421F01E977B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.