General
- Target DOC-SLYZOV.zip
- Size 592B
- Sample260803-qtebcazeng
- SHA256 5f85e978f67ca30474db95b8f3cbb5c5831f43579e6b1e4d5a48df3b3f308bd3
- MD5 12ab55e03bace7a90b2bc6aa8e321dc5
- SHA1 54574c6c9a273aa91a3dc2d38a8d11a448a93bc8
- SHA512 2e285b139387a1183edaacf126a4609b550db779514c456a8d11dc142c80a090310e056b074980edbda27b25f305b46a53bae7b71ff96bbe689c4e90073aaac3
- TLSH T1B1F0470F4D604E7AD8068CF26742F775032C4541253C77DF9C56D01563032601D7C5A1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-SLYZOV.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-SLYZOV.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-SLYZOV.lnk
- Size 1KB
- SHA256 c06e1e45a7e2c74d4c9a3c0e29e49f5c7f97cf339a075383e5d4f9c13a291e96
- MD5 6fb73888dfceea4ca1b325ce88b19c7f
- SHA1 153ecdb46102cf6339bbdcf314a073cb0708bac3
- SHA512 d6a7d583c13f7ebb4d1b95c4729d5e9d654dae00c4810a6382d91e5f3b71d80aa90de663106b1151331fb9f90a872d7f0c7a3fa72226c2f7c75df3381f4bb1dc
- TLSH T19A3147502FF90A58F3B38E7794BB5B2485BFB9AA8E21C61D4141464C1432A14E27AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.