General
- Target DOC-DFIP7D.zip
- Size 582B
- Sample260803-qtl17aac72
- SHA256 ec851f33c823f47d7288b63fb701e07cda07a980eb7623fe2e77762cb5d8fff8
- MD5 f20b30f4a1b4bd101d41b9230042a7c0
- SHA1 9122b379e569d8e67f56a2b22545dbcf25627795
- SHA512 dc5a294a5df6d8d04a72240c6c0c72dafc5477652698dbeeb5aaf5a3788f2910747cb87c06ad51dd48d6837ef4541f3e46d3cf581822693695d1beb7c8d6daca
- TLSH T161F0413762446968EBC29C733A112634138A0108238B9DECFF34F848093AA026C1E0B1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DFIP7D.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DFIP7D.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-DFIP7D.lnk
- Size 1KB
- SHA256 5fbc816c04ed8f7a579589b4aff35687710753587f3fed090bef7c2287435169
- MD5 71220d5a94dfb2c4b2500222f0e0a571
- SHA1 a492bf08706f69118839fffea868ff27650730d0
- SHA512 faa0fe648cb078d7828a7e28ddcdadb9a3d2df48456a097b5fddcb19842b04b1511783a1582f5d046ce8eb4076de585e45922da133bb8ccebf135901dfe34847
- TLSH T189317B503FF90658F3F38E7794BB572085BBB9968E20CA1D0141464D1472A18E5BBF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.