General
- Target DOC-Q0I9UA.zip
- Size 585B
- Sample260803-qv17hazfmd
- SHA256 8cdf4da90a70a1340f2a85aa10e0a5c259d3582dd73e4621191b66244d2a060f
- MD5 5113daa1cf9753c94099ff9611c26767
- SHA1 1417c763fef0499d12d12dfa879cc5c54d73df78
- SHA512 c9b45b2ef201d88e43790852371303a60fb0a4dc9595a214dfcac527ce1bd1551c8258a3b8600803a8745538c8170ac1c0a92c4c585a7c2ab0eed6675508efcd
- TLSH T103F0EB6B000FC619D0BA74B7206344A7AA2405C2411AD685CA75BAAAC9987AB7B4D1AD
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Q0I9UA.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Q0I9UA.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-Q0I9UA.lnk
- Size 1KB
- SHA256 7ee3f383b70192aca6aec50e39ade63b2dad54108ff52699b81381f766ab9f58
- MD5 91b72b578cf2d0a09dd36f7692d8fcfa
- SHA1 d1c726fd4b44e7ea85733b4fffae5ba134298440
- SHA512 407d765b561d2cbbe321e8dccac420939eeee4dabfc0c97f3f3dd1b46ae9eaad16c107958fe238b4ecc3e1153dc1aae0cacf7320418f76f112d73905fcc4a6e9
- TLSH T1FD317B503FF90654F3F78E7398BB5B2089BBB85A9E20C61D4145464C1032A14E57AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.