General
- Target DOC-RZZ7XY.zip
- Size 591B
- Sample260803-qssscazejb
- SHA256 a1bdba9d71a5c73f92eb92511e10d306c3cd0a0cc0156bf7c434b75e68e605b7
- MD5 62e188bcb80bf2d4c58638156ae2a6c6
- SHA1 4603f3d04a4c3efb1fc1019f2af474a19dc320f8
- SHA512 f3f75948c466847409ff7fcb35745b63bfa7949c57fc0af5fb59156a4c90e000aa36a844c51749be7ab513ff566894a3df298a6e5ee9c14f0e11e0396890b688
- TLSH T1CDF0E107831A8B3DDE95D071A6B3F334D0996C4ACA557B1D21B9FB3816E60D4CD1C131
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RZZ7XY.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-RZZ7XY.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-RZZ7XY.lnk
- Size 1KB
- SHA256 9ea3e595d61d3f7a05bf70931c902bed308a53d2cd239944684a04710beec9ef
- MD5 cf60b71590142873508e6342470fae8d
- SHA1 8c91dab0ffc0f39b8a89c61e5441ed17ef572252
- SHA512 3abfd94f344a6ef8319ec0a2cf62002f60e70654a11297dae8f7a37d9379815327a8aa5e0375724758dd4f82dfe172cafffb1aa96389ef17639ba426d7d56185
- TLSH T1C93147502FF90A14F3F78E7394BB5B1089BBB9668E20C61D0141464C6472A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.