General
- Target DOC-C6C64R.zip
- Size 962B
- Sample260803-qtgrgack61
- SHA256 f52b260236ab8393bda84a094e111612f4ef39b627ae2bea277bfc565f7b73d2
- MD5 1725c6c1d49daa8dddab66a846dc47fe
- SHA1 3669ed9ccffdd2637d95269735dc17c5a202c1fd
- SHA512 2f586277d76f42cfb0eeefadd9c325c128d4ff27e5b9b4f7f6e558ba6d7ba7efc22f5796f7e418ea31a813be0a5d72539caf0b8de7b56e256aec111438e5e7ec
- TLSH T15011C81B9A18448FC6A9D3B9025939F34670F111422FA43BB67E5187CB20CCE8B6F028
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-C6C64R.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-C6C64R.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-C6C64R.lnk
- Size 2KB
- SHA256 6244348c21d0ecf77c9a02ccfd0180cb0102618e2f3e52b7fde450cd2da0c2c2
- MD5 b85d08e2bf268696dbe79c5713e7fa2d
- SHA1 01eee4c0a4acf6369bbcfc3211068db34987c76b
- SHA512 f9c3940e445690cca89b9a96a30e571c8eba2850dd5a839659a5ee0fbb27a8998ea803dc7ae50b42997c131ee32546ec9beaa1ef87e3f2c8ef195500fba9ec28
- TLSH T1CB5121913AE81198F3BB5E76ECFA775244BBBD626DA1D64C0C10C24D0832B41D9B6B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.