General
- Target DOC-531AFP.zip
- Size 589B
- Sample260803-qty1razeqa
- SHA256 60bb4a4f8be4db674c951dad746517d1e3baad456af7913f45ee66995bf72d23
- MD5 7e429ea071993ed481a65065c33f7ba2
- SHA1 84706c0917cb06542c246de9338c2817cd09e6e6
- SHA512 75656375c7f8c10d80e7083e62e8ae0883abf310bd5a11737a656103536ab080fd2a6980f56bbb26de144a92832104c204dba5e1e8c73a20373191d128c54486
- TLSH T15EF041E7C320401DEB20F47E0F12B0634246C84396D1A44E1786E0C52DBF2A213505A8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-531AFP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-531AFP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-531AFP.lnk
- Size 1KB
- SHA256 5473062d185ccbf23447045686d3120631595ea55d76502469f181ae1791b91c
- MD5 48950cea0a8e67ba527347559d2b91ab
- SHA1 ef0d7ed0e65fbebb168881e93774073196bf65f3
- SHA512 fbe7023fdd19681055f44343c9898064572eed22b2086ee6c10d02ff9e8c1ad674ec106c8da4f62db602724fcbad79a5769d0f79bf514401e87307cc3636401e
- TLSH T1183147503FF90618F3F79E7398BB9B2089FBB8968E20C61D0151464C5032A15E57BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.