General
- Target DOC-YJIT17.zip
- Size 913B
- Sample260803-qttq2ack7z
- SHA256 53458254859b575585319d7b2874e98a3a6d8a9715bc8654d7a287f71f51c1bf
- MD5 84723b9f74083f203ba1f66060fc7804
- SHA1 62bf352e3281fe5b97de4653c69d7898fa2adfb6
- SHA512 93c8ccbd86f3d36bc4bdbfd3f277699cb7fd0a5d3b945b21ddbe55e4758bc671811a60dcde21e4a731b27c09243f51f3817e911e7bc83f3e18b416228a80ffa1
- TLSH T10B1140B6184D818DC445A9EA15183F1D43FE244ED6EC6A23B209E91A0EB30E947BAC10
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-YJIT17.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-YJIT17.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-YJIT17.lnk
- Size 2KB
- SHA256 11307114cae74093160bf5c43437a96c921add9a58fda7b3647850cfb0425c91
- MD5 1f0dfc728fcc3bb499a46d26c912d383
- SHA1 b700fbe0a3e22ec76d2184ec589e1e7a8919142b
- SHA512 6861c588b61281012ab7a64e6ef1608b7f54c364853cf713ec0f0bf95262c66f37cebb5ca9d97e043bb5bf20122fc2ad3d75ed05e940ee2f4deeb92a357595fc
- TLSH T1514120902BEA05E4F3FA8F72DEFE6710843B7C615DA0C88D0840810C4021B10D97BB77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.