General
- Target DOC-WPKBSI.zip
- Size 923B
- Sample260803-qtdptazend
- SHA256 63ec27ec51a0ce017ee7569cd54372b20fec3711fb0afffb7a78f05b2363150b
- MD5 48d92af3943e55692b7662fba08c51b8
- SHA1 3448de2f7488b707193a548ee3b005aef0bd70c7
- SHA512 a43b347ae6c0b229e5bd1f03d0bf443b1f33714030481d04fea5f7d647a912abc3dc571c227dea9b9dd8d28669e1f84716c16b5361525634c33ba01acb64df6a
- TLSH T12211B721176D77C6CAE2A97120446FC35DB03003029E9603F87E9064015D1C86DD9FD8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WPKBSI.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WPKBSI.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-WPKBSI.lnk
- Size 2KB
- SHA256 ec600037531d6990b36d2f3ab910d9b9fd3f9d1de19996b10e9e390f6b3c8f1f
- MD5 9cd37959781923f937d6cbbdedff9cf1
- SHA1 0acf070ea3b9f37d2d872b941762863951acec5b
- SHA512 e9958acd833ef2b42a14a138778fc54a9c5f181797285abc9d31b5485230a97e2b725ad07522c30dfd5c48b499b0e38029bb7b7d41f92e7d154ff1debe66868f
- TLSH T1CB41F0503AEE0598F3FB9E36ADBE6B505CBBB8A65D70C59D4451820D0422B04EDB2B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.