General
- Target DOC-XEFFAT.zip
- Size 590B
- Sample260803-qtpgba1vex
- SHA256 a5162204fd00447f2b2afca82fefba2bead5a535d34053e517340a38897e9c66
- MD5 a4124426a2c0a4245d2548ef71d8a88e
- SHA1 7e6cecd6fed2e63b26ec474e4b04c078f1691695
- SHA512 df65f2f1ecf7cd39c2618e38720d39682364751bbbd4c1c734e7571c55b4eed8bbcaed3e4ff6ab23d7cca43d6b53b5cf2a1ff412da5fb9ed5f458a46e30526bb
- TLSH T180F0411643928406DD2BCBB38064F8EA932069FB4B08E2EDCBB8F0F56420C202C850E8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-XEFFAT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-XEFFAT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-XEFFAT.lnk
- Size 1KB
- SHA256 90f33516fac5a7334dc3818dbc633f9d1b6d42fba5824d9eae8c6cac0152629e
- MD5 73a8aa8217ab18f3d32ac22f4f300db0
- SHA1 76c5276122d8c6a40deddb07530ba24b140c2d78
- SHA512 0d158f53460cadb1a641d6228401bd493cf954bb3419117e90fd7b1ffa9bf46548914b3f13019cfe6c2fc83b7a989e22c151e436d2fad3427f231b85197610db
- TLSH T1FE317B507FFD0A24F3F38E7394BB672085BBB9668E21CA1D4141464D1432A14E27BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.