General
- Target DOC-2SFRYU.zip
- Size 593B
- Sample260803-qs8tka1vcy
- SHA256 74ecf37c5b5559b1ff87d701af4144e6e29235740c48525672891ea90020d3d4
- MD5 225a64de77dafe61d11e9bd8b0dd822d
- SHA1 1f890ece208236271379b2b12fa0f515cf352b73
- SHA512 76a9d0599bd3ef427581ea7997a82f7499a8ae468c679e59a336be4a63e21ab60556ea1664734a2dec479faa2cb68c0f8c560b0f56fc93557da3b8817ed0b3b4
- TLSH T1D3F0E147C3B3110AC28246F46D62BCEAC99755CB104FE6BF7C4CD50625B8C897AE5506
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-2SFRYU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-2SFRYU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-2SFRYU.lnk
- Size 1KB
- SHA256 dfa8b7793d4df54511cebdaf8eed63ecdcf179267ba5db4ed9290276dfc0daae
- MD5 54dfd56df3c8a04f85938bd5c2f36f98
- SHA1 7f4413299aa9a8ac2a1bd26f71e3d5bf0d75498c
- SHA512 fe1cbfcf2dc3d38346475154133f1c4a2b8983b55fd804586a44804e1202a7505defd83fa28a4877d6feb64f5f7659c8a1b3d19bc997cf14d1470a5375084c85
- TLSH T19E317B503FF90614F3F39E7798BB6B2085BBB8569E25C71D0141464C1432A54E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.