General
- Target DOC-4T99XR.zip
- Size 589B
- Sample260803-qsj57sck4v
- SHA256 a26bf263f5513409b8b033b49970619ff0819222809870344a3f07bae5ba5a50
- MD5 041c2491cf947df419a314d4cd8a2f2d
- SHA1 94b2a36ad4b80c66d3f487c75cf4061f54646a36
- SHA512 9ea23d600b80f908c6cdda765b4bd987761109748ffea7fbf66af8fe3c216aafd7d076d002677e71606177fbdcc9266bae15053291a7f6ec3ebf1e0c6814602a
- TLSH T16DF0E12A0B0D80C3D13AF7F54125FAF50E55DA23912B766945A0DF019918496A6684A4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4T99XR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4T99XR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-4T99XR.lnk
- Size 1KB
- SHA256 ae64e83b433f207b9091705e2d2bcb776c165a32a86cdab5b3695ec47f7fa2f4
- MD5 8cbcdb105a8b306d7ec2708367aaa151
- SHA1 b0fca2e2311ad9210bde0fc9624f92ca3a6665e9
- SHA512 7cfd937c28f1bcb0650d2af8f50a2d77abd3552f9a350a90c51c14147b21d03376d8582932a6608f2b3eba4cd4c11df92129292bf3f8813f467c0b849f20c6a3
- TLSH T14A3197202FF90614F3B38E7398BB5B2088BBB9668E20C61D4040460C5032A04E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.