General
- Target DOC-L77NQF.zip
- Size 591B
- Sample260803-qtexwazepb
- SHA256 809cf2b666e019b2a7923952ff2cc2c4fb482f987687412cf36cd1341b85f6ba
- MD5 e811acff118c33e8de1293df676d89ec
- SHA1 fa5610483a10c101fae8e29106eb106029c854d7
- SHA512 99152e12c92e975a0f3056e27313f2b85393d517b4a8d02887b1cf4b5c96edab58d752b4f5e0296c97ddce5815790d05b5dea567b7ac118cecbee3008e7cac71
- TLSH T1D4F0E1854360941DED59CA3D4C226BB506096BC8086299DE467BF2C90AD8BE4680394C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-L77NQF.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-L77NQF.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-L77NQF.lnk
- Size 1KB
- SHA256 1720f4995e63927231cff3de06394e2165a072c2c72843ab35dd4a0c357d34a9
- MD5 fd5583f5a603f299493d4f706c204f81
- SHA1 d5526187f99ca2c1c94a197595098323de7d53e1
- SHA512 1f18332da5b3e017798bb00c15d769962b4378e657a50f8105c546fc29fee7a6cc1957dce0b30ca0805bbdfd0ec1e1e13573682ac3b6071e17d947b18e3d7849
- TLSH T1D93147502FF90654F3F78E7394BB5B2095BFB9A68E20C61D01454A4C5032B14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.