General
- Target DOC-BI54E0.zip
- Size 581B
- Sample260803-qtyd8a1vgx
- SHA256 b2015aaea3e7b338419a2bc7c7e9040f2cde1216f60c465abd753e33fe426cf7
- MD5 8bf9a2a5b9940668e9b2530e0d83e342
- SHA1 fa5b13322e854b9cd852e43ed69ecc363eb79125
- SHA512 4bc397dc3d0cf4ba0b760438ab7229522b2c1ec15230d3af79011b9822204f53b548906632c9145a1a937baccbf0b03df6feff3af513eac3f94be0c83d1ffe81
- TLSH T1CCF09643350A40E0F07645F12B9330588D99FB849C2635C20D77FC479D39CF0795E166
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BI54E0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BI54E0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-BI54E0.lnk
- Size 1KB
- SHA256 103b26ff328a326c6682773922dd81785a289f13396301ebf6efb630eed616e7
- MD5 a59ac24520125287768d5c3bbf201344
- SHA1 9e077962db295f2b7675d2fd4321ab4385fbe76f
- SHA512 8ed632c14e869df651513cd6eb9126dafbddf75c1c1647133d163f43080312d105d43ad577b438b14aab8382c941b30337da6e534c64a5f130319b2b82dc9646
- TLSH T1933147503FFD0624F3F79F7398BB5B1089BBB9568E20C61D0151464C1432A15E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.