General
- Target DOC-BL42OH.zip
- Size 935B
- Sample260803-qswt1a1vbx
- SHA256 2ad2699f9e0ef82f94275a68ec76c43b0ea3787bd1e93887df0284e34181e8e9
- MD5 2032731f31bc0428030f97ca55db1698
- SHA1 08c38cfed6bce0afe5719a1a32b7f1becb01e69a
- SHA512 3d54fb35f7b10c1e6bad67af4c19a602a4bd33e060248d8ebe937f470e2c10fbd2a441abf18147d9901de17960665811b04d1ba13927f14c0b47e4611ccbf569
- TLSH T13411B7554A79C288E440D4F344268FC911A8B168520BBD6612EFDCB54D332CEBA1F368
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BL42OH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BL42OH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BL42OH.lnk
- Size 2KB
- SHA256 9d408dd67833872848edbdc75d9711629899e4260cde7c1abb40cd98e1d12fb4
- MD5 a937e1d79234388d6c7f851386f6892f
- SHA1 8b9b50c03a4701a8dd8514f9fa4c395519aab047
- SHA512 4f37f34e81afb4a42869308f6e65a582211ace941bf1614b249705e4c0a079aae46a9aca21322800b686e00c7a256ad7c7975b5fe2a64258c27dc6bdfe76832e
- TLSH T15A4125803BEE0198F2FF8E32EDBE6B5045BBB9626D60C59D0950810D1832B01D9B6B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.