General
- Target DOC-3HZFZ3.zip
- Size 592B
- Sample260803-qtx4fsck8s
- SHA256 db1f623835e5f8554232ce83d475b691f68cdbe82f5145054c284abb61d1e82d
- MD5 c2200b775dd54994d7eca93fc98bfe07
- SHA1 79df901ec79bc6b0fa290c0dca55eb111401be6b
- SHA512 a822d50e38150628fe4dce224d1683c5a71c69a34349e232ce03e1bee35214cfb391d541c78a21e07416ed047acbe0b552ff54f87482695aa7d5de43e51a7d5e
- TLSH T157F0962BE384300AC7AC5CBB442A3D5D4F0CF249D12CDCC11B4A8F124CE68622782BBA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3HZFZ3.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3HZFZ3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3HZFZ3.lnk
- Size 1KB
- SHA256 b81518e83ea78d61be421f5555c74ac2bcde6b500fa8722adbff7955269388ee
- MD5 44863b8d8c3ca21f02cce1b88724691c
- SHA1 938a88df8cff6db9608a33bd0f003477b94bc5d6
- SHA512 d7302dbf94b068165525228103e80af95dd44787564bb9122a4d9b809140d9015b9abacd4e56cfbe222a34ad6466e6229ed38028872cc82bfdc3f4ab90eb47d6
- TLSH T1A83197403FF90624F3F79EB784BB5B1084BBB8668E20C61D0140468C1032A14E57AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.