General
- Target DOC-IP2NHZ.zip
- Size 591B
- Sample260803-qthnrsac69
- SHA256 d7ab621f5e3156ad1d7fa3748b4700c9676b08d91f0ad8466edde915ab64bd3b
- MD5 16d8374744ae8ad7325cbccd6f18020a
- SHA1 3dc6abd55e38625d80062cf6f9a5b09038fa5a4d
- SHA512 22797d5dc9c4540dace6082ad43050d665d5b7de54fe72cf5c3d2fb1f1e49c33faca7126b38c8900ae717b06f6f1d6f804f458bd9b4f9f4bc2c08d0b168bc21e
- TLSH T111F047250B23CC89DA7311B6C87726E8220058D211EDE01B27B5C40EAC7302634DFA34
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-IP2NHZ.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-IP2NHZ.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-IP2NHZ.lnk
- Size 1KB
- SHA256 00bb239d819d3fa0527127fea0c6922d44d1d4729300ad574c92468c8aa828a9
- MD5 63fd379105cfa5082caf41f8bd2f0714
- SHA1 352ec08e1916fc0497c0a2509969f99c202b82ea
- SHA512 2617c69bd5acf064365417a2416fb1ca35d688c0c674c3125be6fb8c4fa815ebf55b10b35f8d3f9e1bd7a61cddcc395a13d47e026ece60f1307e5fdd114953b1
- TLSH T11E3147502FFD0A54F3F38E7394BB6B2185BFBAA69E20C61D4141464C1432A18E17AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.