General
- Target DOC-HF4A0H.zip
- Size 595B
- Sample260803-qtrxfaac77
- SHA256 d6a3eb08cacc992835dba0e0a9a3f9c566b979cceac3ea10885c50fe5eb2c555
- MD5 ca8b3764b0a9e5dff771e08625bfe80d
- SHA1 8d126c00ed8614003d2f78d7a03540022612c1af
- SHA512 d3260f3e795d9a252c6487e30b91a8df63b3a79eb18b3161781aad78364c7dbe631c821ac3cfef167e893a0873840f3effcf07906d85d5102377333df0495bf0
- TLSH T1CAF09667F0D74C81D18DC2350629935381DA1EE3537A1B9B4540C4814C4856BEED00CA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-HF4A0H.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-HF4A0H.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-HF4A0H.lnk
- Size 1KB
- SHA256 5db8795f1d5bcd64544f59ecfb6fb78b01e8c13cc463a4c3404773fb7bb57604
- MD5 70d3e41bd8ce6d154fa92b742efea550
- SHA1 5c79c2d67eab335090f5b3a1062b203ef41d1b0d
- SHA512 a0bb122376d9cad6aa0338688a5e35f1e92f025c2ce268c8c4603ef4e0d52955d5162d5d32bd54e62f7f0a2f5d7f46bf693e5d5e682f316e20a9fb131619d046
- TLSH T14B3147602FFD0664F3B78E7795BB6B1089BBB9968E20C61D0141464C5072A14E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.