General
- Target DOC-I43OM5.zip
- Size 832B
- Sample260803-qsw5rs1vb1
- SHA256 046a326be355858f28c45599c5f8fed915b5f7b8a7ae9a611bf03db14119bc8f
- MD5 a3c70a13fb9315c58e1e8ac60734d886
- SHA1 5be0a212c0640775d5750aca83013e93f2813481
- SHA512 08034d83eab765b1531f4d1cd44e88a37d2a6e473a56e3f8517bc0480798463b0d8fd8955914496a91db5321b065dd5af033309b90c6cdff429f023da5519f25
- TLSH T1770146FF5550E286E12185BE11131282D3025BD5E35F37D1B5E2780669913A1F8CFE79
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-I43OM5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-I43OM5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-I43OM5.lnk
- Size 2KB
- SHA256 6cd3f1dea5cadd75eb65c77baf211e7d6c7dbad1df3368322e75c36b394725fe
- MD5 deda2e538f6b95c8f54d6348cd83b218
- SHA1 e8768aca7d778f9d32ded7b0107fd3d84f0fa58b
- SHA512 80d0938023932d28d9da843002bee02decf85a8c59413704d64c615e2586578e70ef465e4bb56d6fa26ff70f71bd2c6be3b27c59768a97093dbb47e991b41c16
- TLSH T11E4137503EEA01D4F2FB9E76FCBE2700457BF8516E22C54D0990824C5822B05D577B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.