General
- Target DOC-L0R6FQ.zip
- Size 827B
- Sample260803-qt2rmsac87
- SHA256 2408195f4466ec5d7625383140398f400e6dd9c714ed3e02444216fc2bd02fa7
- MD5 73be129dac7abaec44e74a2be2f91b03
- SHA1 48a2a9dd88ddf6883dc65344d74a3abfa294cc16
- SHA512 1446c6ac8f602d06e11ffb9941302cd73d3ed9cb1fc952edd00f5f5e0d58c05ba5c3ced6e1e4d3253c13f5103d45d1c54719c1db8cfe11eec439f859bbe6712c
- TLSH T16D017A7310FF7D53C07F747A523C2D47254640185B0151186DF7D8981567B76C701826
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L0R6FQ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-L0R6FQ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-L0R6FQ.lnk
- Size 2KB
- SHA256 8b666a44a4c4d0d8a8c2952e5d40f2ee5d98a85ab7180669042c782443dce3e8
- MD5 5544834e329f3ce6fcca5dab7d298e94
- SHA1 25278b558b59f9a85d6c09836c2a31607def9413
- SHA512 0eec3ae76fae1fc3916ee850fede104cc8160d1595758bd81df1a9a8e9d9d39cc7cae866de4b89735549b9035309f4e8512787260c784542a58e18b2317c7115
- TLSH T1774137402EEE45D4F2BB8E72D8BE7B9249BFB9516DB1C4CD4840810D0822B01D977F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.