General
- Target DOC-OAZLD8.zip
- Size 590B
- Sample260803-qtkhcsck7v
- SHA256 50d0a0959df3d3f1ff5925351fe935ff86944018e43ae9d038d7d6f950e46319
- MD5 bf7ee56bbb155d445258a63859dd1386
- SHA1 edd29f60f521d82b3726704f3a81418ccb6c2dcd
- SHA512 6237191bc117c5a0a1fc403d82f041f8aade15512dd603c960fa96ea7907e4e92a4a903ee4b242c7ab4468436ef2e0863e0dd80534acf813943b302e363fa3e7
- TLSH T1FFF096204CC0C360C833E87B4F72559000CCD211C2BA7F6CEBF6D85D851427A0314577
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OAZLD8.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OAZLD8.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OAZLD8.lnk
- Size 1KB
- SHA256 80f4e3742226d5d9275814b841f02ca1237d138c65db7114ab96b23ac90d550f
- MD5 8fc3f33a31c5dfce5100ed5a98ed9005
- SHA1 8057bf0e2b61d774984361985e4b10f8785f1397
- SHA512 f1e7718ba6674ce0b7f2ea9cecb3e4c3f53fcea5dadcf2dd260f638dc7440739ba445edc94e8778893dfac3909b00fc118b2b6678399a371b130185641fd9e50
- TLSH T18F3147503FFD0A54F3B38E7398BB5B2085BFB996CE21C61E0145464C1432A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.