General
- Target DOC-GXJQDR.zip
- Size 593B
- Sample260803-qty1rack8v
- SHA256 4687c7f96ed9dcf21a3cd77bd85aedc23ee9b43d0d3eab81c394ea26b6d3e8fe
- MD5 c838cd0116fa0430b05e6dcf19f12b58
- SHA1 16952c5603115eb098153f5ef2668b9e3394685f
- SHA512 08f131b60a8a9ea8ae3b036036cd0a3a9e5cb6f00f641935c0d51f29c07a782b04c5f215f305ff1ce3d94f14c72c999a0bb6c3ae1fef29631ddf7ea845d812a7
- TLSH T1ABF0E191120F0242C0B3F07089A753AB4B796883614E771375909271BA139D02F954A4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-GXJQDR.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-GXJQDR.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-GXJQDR.lnk
- Size 1KB
- SHA256 c9ad3f978c600466fa0810f3a751e2a31c1e5de515933a5d726cac0d0a938625
- MD5 246cd52eb05040fe8c998b0c903cfb2f
- SHA1 0f957273fee38f6600df557fc0fb90939138c2e4
- SHA512 f9509b2b89bb432a55e89fcdda04a2935aea7cae79ee014b848950b2c9d91e7099818bb7582de1b671c8c88db69de6732061844846f56e5a8f5b423318882087
- TLSH T12C3147503FFD0614F3F78E7398BB9B1089BBB8568E64C61D0151464C5072A14E17AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.