General
- Target DOC-15MJPM.zip
- Size 594B
- Sample260803-qtkhcsck7t
- SHA256 a6875ee57f00fb4836dd47a1ba4314d7b11975003fa7dca46720c561cf13be5d
- MD5 b88da2449efb08935ebc236a5796beb7
- SHA1 d4929ce5b7f474037310c98fb0e32532fcd70bb9
- SHA512 c68b4954909d355a781a1937beba8240625bea5cf73ee8942713caefdf6b9892c817e6e7ce6db4ab8ad0e328586c208e1134649150d8354d500e26727cd7f15c
- TLSH T1A7F0E1E755470EB1D146817609DB41662A7183C8674EB1739C14948450F1ABF0BDFDF3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-15MJPM.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-15MJPM.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-15MJPM.lnk
- Size 1KB
- SHA256 1a4ba6b4a5bee76d97bd3cd194a5d5d46dcfc448ef614787fa16320e5f2f8165
- MD5 78b6cbc7b49515d582aa3d2e5409c40a
- SHA1 3482157e9bd28232963d15cb5164e0a5d2441244
- SHA512 500550ad2adc0f229b7c77b9f27e6ce83a94760b4611bca80c973a9d7c57f2b927fbdff51d4ad4127c7f5e5bd40a6e0f1e05a57b60ad7dc1356d359183f9f13a
- TLSH T1CF3192003FFA0628F3B79EB394BB5B2089BFB8668E20C61E0041460C5433A04E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.