General
- Target DOC-59PANN.zip
- Size 590B
- Sample260803-qt2fwaac86
- SHA256 8e977fe4e11952c14445acb9643fc0b8291893794837b130bae2adc181f34f90
- MD5 b1c94bb102c5b93e5b6daf5df0f3dd2a
- SHA1 b42c1e56e62cfb037b1897f720bdc392cad9a012
- SHA512 9c45fcd2da9a49e48963e9d9a79e9a808cb6bb6e0d2609d5f9bde69e3ecd7afc248a3724b06b88626e7b5b56a542765f9247154c987fce05b34434d4beb7fe0e
- TLSH T12DF047244E758295D9B1C1F49C17776995749A2501110766CE5CD3482380019D610040
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-59PANN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-59PANN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-59PANN.lnk
- Size 1KB
- SHA256 8b64bd9e267daa2077e6e72de7bbeb27137cbfe88b559a233199b043f6a07be9
- MD5 fc4f2e81a603ab81e0c59e76b170a37d
- SHA1 913a7b13fa35549c07e61f6c589abf67aa69f6bb
- SHA512 cf82a0223ad1bcab61006d2c4a517e6d47657febe9e52c309c95d0ca9dc895381ce3f56f34a576422a6910980cfadf9d5f4f3137d79054ed1e3d197fad7a479c
- TLSH T18D3147503FF90624F3F39E7394BB5B1085BFB8968E20C61D0141464C5472A15E1BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.