General
- Target DOC-JRLQ9N.zip
- Size 910B
- Sample260803-qst1eazejg
- SHA256 b82f292385ef845ccd7cf14cf41aff8703f8ee36d45ee60cb31b6b3f09fd68f8
- MD5 7a597964d671b060ea39b5c46a6e3834
- SHA1 c08c1adfd1f385a9e7f059c09925e56bee125a34
- SHA512 d8b28b96d0a4ce080ad86f022e66c09c50c1660fdad36586b732040494672dd1fdbc0b514edf40a40c6ced5b2496cb793dfe48124a72736d0a8a3b1ea2ca90a3
- TLSH T1DB11EB94D79FE194E9D894B752E01955392732C065024B17B72BD3115F554AFCB06740
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-JRLQ9N.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-JRLQ9N.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-JRLQ9N.lnk
- Size 2KB
- SHA256 1666b6ce33188c03e042362752575cb833649cd2c53f63401c16987c1498ca0e
- MD5 c3bcbd8fcb24a4c80c6185d1a6c2ad30
- SHA1 3cb54ac404d3ece8822f570be99c42df29184aab
- SHA512 da21f9a522cfd6d4d3eaffdfc08f9fcac62244295c900df525279c791d818c092be452f3ee8313fc39ff0880a052af31fb87bfe70e4f963da4fd41e5c83b6bc2
- TLSH T1144104502AE904D9F2FB9E75ECFF371185BBBD619D70C58E0850814D0422B04DAB7B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.