General
- Target DOC-NXNCBS.zip
- Size 589B
- Sample260803-qs92ma1vdt
- SHA256 9cf24203e5fa98b90b4fb1e295534f27ecacded31c59a3bd7cf488049d5466fc
- MD5 aa126485712fcb61708d483cfbd09810
- SHA1 11a7a301c5df486713f462f95e75baf8dd30f208
- SHA512 5cddea7a7e4c936da1d3fced365a6305ff934db7c39f00ab3a499ee57864b7339d7087219b662414822e759959e51dda48f7c53f768ddb48d2c0689d4eac29b5
- TLSH T1E9F0419B020A8D0CCD00D03BB235EEB63C72ADC3001429EBC42FDE0A84C80A996C90F3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NXNCBS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NXNCBS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NXNCBS.lnk
- Size 1KB
- SHA256 beb8a230dc0fd4126b6243765a56ec51b0475fd0685af2a1cad99a5f45192264
- MD5 0b21df3346b9132ead81df9b88633bd5
- SHA1 33c60d64523aa8e7f57ab9ba9b0a9a58b26494b7
- SHA512 920c99653a66d9a67e06c9a2ffcca230513f750c24b6b06caea7feb6c14302c876f7aac90ea8694f22d1d64f8dae5212ee064834fe6fb56312deaf98697882ba
- TLSH T1E43197002FF90A14F3F39E7388BB5B2085BBB89A8E20CA1E4140460C1032A04E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.