General
- Target DOC-0PRXIH.zip
- Size 892B
- Sample260803-qs9e4a1vc1
- SHA256 403b5c2ef3b7df42d186f6f97c8ca90ec2fe3ad8a881bc618ee8c4638f84cde8
- MD5 89497dcf58912703a9213bc2c1a2043f
- SHA1 3f84c634ffa8106be051480e4389879d45b6e836
- SHA512 3b13e14375b7a0e1d3176a3303020b6a2c5987a6906ace239c7659be36a69e755a8ef3c6f48e451cf5989793b5554631b7f20bb9a94508012b46839fc2800996
- TLSH T1821196931ADEEC96CF5DE2351E60405DEB28277527C8775A250A7403FA7B1903375860
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-0PRXIH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-0PRXIH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-0PRXIH.lnk
- Size 2KB
- SHA256 aed227f15dafc1857d6946b478264a93ab29b16db7c03e4ed5844a853aca65e5
- MD5 3cac4865cecde05064c27b8677f168c1
- SHA1 2dcb47937d8c3760d2a5e82970eef7e3fc2645c5
- SHA512 f7db4d59e28847b660776c108ef86c8d37f18dbb4988fdf0d7dc32d8c12213712a8b3b8cdf1ac2b5a1e28c27d84778fcfa15b4c2d9e8377e2d9d8ea013911d44
- TLSH T1324135903AF905A8F2BB8D32FDFE67454CBBBA534EB0C54D0850820C0822B41DA77B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.