General
- Target DOC-1OECIF.zip
- Size 582B
- Sample260803-qspqpazdrf
- SHA256 65ba3456bdc44b82c9d227a2195550a4610222899c9efd0b212f15ce0d48c1b5
- MD5 625e7324e47b04e1d6ab7aa4bcae0a69
- SHA1 6566b064552b10d3dda93d64ab31c346626c2c6b
- SHA512 d4b1b1346081e3f9c608dcbfb11b6583ac70f0c6996d94852202b3e95df170e59e2edc9c66cbf72c69ad0c96ca240cbf57ba0a9cc953cc1f766d96b1eb1537f4
- TLSH T169F026535496BC88E12700F391C36467BF6DA5060D5B453A0F38D4193DF65E5AD0B734
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-1OECIF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-1OECIF.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-1OECIF.lnk
- Size 1KB
- SHA256 9e50c7587ee9f2d81c99088e5173731f8bc38003b369ececec0b657f11da7383
- MD5 d38c9f5a712117e7c54f038d802379cf
- SHA1 1387be4710166d9017acf45e8e6370c3ffb787fa
- SHA512 3783cf69d8c9e09374f3cedfeefabee9e01e51cffd0cbbbb6ae2be97861fe6136f80a1f96187a79279d9ee237cb51478ddb2e6c39e6ce47131775c55b5bb0921
- TLSH T1563199503FFD0628F3F79E7394BB9B2085BBB8668E20C61D01414A4C1032A18E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.