General
- Target DOC-3PDGD0.zip
- Size 584B
- Sample260803-qs8tkazeme
- SHA256 305d4e2e6ef76da812cb7427e0211d4f88e763eea6cb6c34ca917aa5327f62fb
- MD5 76ab9583f3163b1c59e52fe37e8e2ca6
- SHA1 973d27da6f35914a9410f59b3c30259d2cdc68bb
- SHA512 db7cb3dff6f617b67dd1241aaa39e2bb2e7cd8fbeb08dafd12df96868bdb78911dc8a43d66bc0085d3c311451e06ecf74384581cbeaf57e0356820fff0e3f4e4
- TLSH T1D7F0EB83040085C1D1A7A0FC284B36840FC4D4EAE28319AA7423D69FFC6668D272C9B0
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3PDGD0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3PDGD0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3PDGD0.lnk
- Size 1KB
- SHA256 0a9e4c8bfa7cd5d4623d1a80c368814f826c1d555f096a7170f23d314c176c73
- MD5 48123875ae5bc5ab5d95a96e54c87154
- SHA1 a57cf84ebdc01019035ea59210ba710b200235ce
- SHA512 3f277c062eb97e835563553a4107e885c0e5f07b79baed0beb09692a1023d8859ab4652a8d66281f88c3869bc44aabcd0c40dd44c1be7b2721db5ca6fda70958
- TLSH T1B53147503FFD0614F3F39E7795BB572085BBB8568E24D61D01414A4C1432A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.