General
- Target DOC-9C6WUU.zip
- Size 578B
- Sample260803-qswt1a1vbw
- SHA256 f2aedec3e75e051240a0c4dd1bfa4ff9787372ecf67a1636d80573b8daba9f93
- MD5 45ac45abc41449e6c9a1b39af75728df
- SHA1 52b354f53f83432ed73fa702dd90944492aa01e2
- SHA512 8a0280aaa62b62aa7a9568b5484611a0e875adfc60f24b76670dffffa16765ae54c9539001249cc3cdd3d48441b3310fab2ff50a3e9e4b4122f576a70ca5dd83
- TLSH T1C6F0E15101305081C343D971A7D371280E8967C062664DD2A871D14D4FF80CAA968F78
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-9C6WUU.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-9C6WUU.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-9C6WUU.lnk
- Size 1KB
- SHA256 2cff16db273346ebc33303d07962c7edc3281637a388296b95d8eb4bf80b2c8a
- MD5 f28b7fe7f47bf133a7b85ac78d9db5e9
- SHA1 d0e0b68bd56ca7d761b32837c7ff7417ef7e406a
- SHA512 86e8b8e71c2cd383ee1fb314956b706abd2cf860838be76732948cb564cfe0c6e9c03e98c58d425a90371b0754a7c707ccfd588e3bf97366cf1270793db67d08
- TLSH T19F3176503FFD0628F3F78FB794BB5B2085BBB8A68E21CA1D4141464C5032A15E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.