General
- Target DOC-NGC191.zip
- Size 590B
- Sample260803-qsdy7ack3x
- SHA256 bcf9c5dea682e080d6196f69a528f8d036504def8f06748d10a8bf4bd6145a5b
- MD5 9b42dd13e9ce48f7dcd93d9a82347fc4
- SHA1 b72065a6e8c3b522b4ac598ad1ddad8605cb2ebf
- SHA512 12f783038b2f5fb5aef5f1ae723ec673672de2e4a6ad865316fa6b78fcf277a235fa3bf1b1f77022dd0c57898ce4440de1c8322b9a4e7e93dc5296f192aa35cb
- TLSH T1D3F041C608E32B57C01368BE3BA3062E92173294842EFC0CCA54DDBC47A9DB36E14971
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NGC191.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NGC191.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NGC191.lnk
- Size 1KB
- SHA256 f4d5db4ddf01dda68aa2f675821dcc96162ec083bd350b9034f74ae4342a0405
- MD5 9b6a0e866c0952484550c48b28915d87
- SHA1 ce3836797395be92fc7be300ed73c4b0533c6e19
- SHA512 58ae5443970ca7a432ee7d23d81c51ec36ff5bf5109e8ba12a50b5df4ffeaf2a6317cbbae544348af85db98d0faeb6de90c7a6343357f81af7f9962032962070
- TLSH T1AF3147503FFD0618F3F79E7394BB571085BBB9568E24C61D0141464C1432A15E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.