General
- Target DOC-M5G5U1.zip
- Size 588B
- Sample260803-qtbv8a1vdy
- SHA256 65b0b7eb333921802c31acd8693e1497474b9f85d44bdd4a05f12633f54c2d67
- MD5 d50236ab4689a6cb22200ea944a397af
- SHA1 ff4191764374e6af4083784b052c39ac4a1a4211
- SHA512 e21d80b37874bb329361bbd73c14ce6b3ed467e21477da8772109d52ab08bbfab56458a5429a2d9425ba1c662f28137f2be053f05d587be89cf253ba59aeed9e
- TLSH T194F0415640494019D73B66F5AE1632264DA4D0239633DA2B0720D04E7E682BEBD2BB27
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M5G5U1.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M5G5U1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-M5G5U1.lnk
- Size 1KB
- SHA256 19693f706dad48aa186d03e013c7ce4ca35c09ce030d9fa66f9ffc2386491b84
- MD5 2499625390ebad15bbf448f19d39a7a0
- SHA1 ad0bfc036487725ece4b191a9b422d442c4c8873
- SHA512 a96b584752ede476d05dcc943890c0f2d63e8615ce173ae72c253f92563f96d4f6ebcc3680550bbd96bdcea4aa50e51f63240f19959460de1724183fedde52f8
- TLSH T1BB3147502FFD0614F3F78E7794BB5B1099BFB8568E20C61D4141464C5072A14E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.