General
- Target DOC-E80MXJ.zip
- Size 592B
- Sample260803-qte8ms1vet
- SHA256 f0f5f772f54c4df01159c1bc380bad021faf09927a43d27b1df47b6c4e76f1de
- MD5 bbf9c1ebe682c43246e8cc77db8642c4
- SHA1 aa1d0a9bf4ac90642edf289652bb689a24c4e032
- SHA512 7e863198a0693334a804422d07bdb0e142d7073bf8f44dd81f009d97463b6eca7bf9d46f0fe16d086eb4cfb40f7686e740a9d6b344c9706027f00f8293aca637
- TLSH T1C4F047DE98BD5C45C861D4F4C8BBA594913C7050413F6A176510B09B7F51CA3A630508
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-E80MXJ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-E80MXJ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-E80MXJ.lnk
- Size 1KB
- SHA256 8f2113426c8739b1665ede32abd84c696f7206a2ad5ed9d0ea1c980de0c1ab30
- MD5 ec89259a76bb646909b31751a0e59a12
- SHA1 878d3a9a9ed58352e13427b981c7c16e7830de68
- SHA512 9109708020ada2812e3c30afd3dd11fc3b44f83f9095869cf2b5c2318c7724224f4d324d9dfbcea07728b674e9d0419c06a82e7f390a093df7f93f11a975b6a5
- TLSH T1563197002FFD0628F3B38EB394BB5B2084BBB8568E20C61D4041464C1032A04E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.