General
- Target DOC-O296QC.zip
- Size 586B
- Sample260803-qv2g9scl3t
- SHA256 d433683dbd47ae6349e78116b258ff648f1edf866e60a9b7bd153cfe2802f895
- MD5 0b7ec12e498d5706f3f3ca1860e1b0e8
- SHA1 e8f093d758476ebd622661182a7dbd4c21ff2dd6
- SHA512 c6e1bce1c3c65ba828b268dbeafd499096d6b8b9ea9f5b48ac2c9f38f3f4449b3433ddd826b7e49c25b91a6172dda5a9515dff89c5f5ddddbd5667fab234bf3d
- TLSH T1DCF0410229614F20C10372F5D50B6F22EF3C4C12345A762B3945998CAA201D882DE5AA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-O296QC.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-O296QC.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-O296QC.lnk
- Size 1KB
- SHA256 3f7ce8072bcd546bfbdfee666dcf16f580cca3f509f77d20012b116ece14f9c1
- MD5 01a4fa252bbde593423e9f8573c97fcd
- SHA1 3715db0d527b082344568a23444ae4380ce6994c
- SHA512 3b71360019b586f989d70ab0041dfeb10fd17df71303656c99098d83643eca2736d8ca57212bc5eb5ecbb0c2f3b1d7482da506b5462892b451e04e90c78c5662
- TLSH T1763197503FFD0A54F3B39E3388BB571484BBB8568E21C61D0140460D1032A05E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.