General
- Target DOC-PQ2W1S.zip
- Size 592B
- Sample260803-qt7b5aac97
- SHA256 d3656d8888701818a8acd7f6a6d2107bde027ae2696bac950165ec90453df378
- MD5 340866d3b86a4d2fe20bcc1ceb692bac
- SHA1 c18985db3682f1c8948bf7ee8a402df99073f8ae
- SHA512 b39b229ac8095f4818e471e52ea659964ac6ebb74d868c095e0b7baefe180e0149971b5d4f0deb0d4e0f8a5cbaadd4eda31a6dd31ceb78eab5f2ff56f7870a2f
- TLSH T1C7F0E123CBC90AC9E5A4E1BCD5F33C2A2C93AB48595C18486A91D2092A139C85BFA204
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PQ2W1S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PQ2W1S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-PQ2W1S.lnk
- Size 1KB
- SHA256 d6a7f62bf1bdb182695e6ed18f6485f1d2e72d66659e7c7c9dfe87e9438421d6
- MD5 cd63aad994cbac1e861233af1c2215fc
- SHA1 f496b65377fe897092d2070f244432f86d33800e
- SHA512 a89bc0b6959373b0c98e5d98a271f82203ee6658b7f035e45acb8d56276f311be1a0ee56243f32b318f43011dcc8236d6b45841202fc13a8dcdc29b1a425de4a
- TLSH T1CE31CB403FF90618F3F38E3384BB5B2485BBB8568E20CA1D0050460C1072A04E67BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.