General
- Target DOC-WIN0C6.zip
- Size 592B
- Sample260803-qv2s2acl3v
- SHA256 410ad41a63f8dbd018e1abced7406f5e05e058b03f06b199a7a0d83c21986e85
- MD5 b90bfd57adaae58390235fc8e29a291f
- SHA1 7a5678463def3eb107946e7f75bbb8d7bfce2287
- SHA512 6a306e4ccd42a97dc9e7958a72e28bfae3301c28f30e7e0628b2ed0cb0d5775a1f6446a41790d27b64ff8521bd66b713aa791eb7b14dccf2d26791a2aeeb92f9
- TLSH T1DEF0416571AD2CC7C103C77C7C3F113C5F24111644288F22471CB0CF29E2487AB86980
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WIN0C6.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WIN0C6.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-WIN0C6.lnk
- Size 1KB
- SHA256 662d99cd6fd4820780032c3978cd3f9b7aeeea11d7f5138eb2945f5bb219de23
- MD5 df64409126c3012bd06746b4fd3a6f7f
- SHA1 b6353a6400719e4183dfbeac4e3f66dc408df1cd
- SHA512 c31e39a197c9007c6151c3d97406e867c36a2979c70dfdabe6f1d4a5c12b78b0723b61d7697a0e7d8bc2f09a965e1c37bee07076849108a4cd2e834b1577e1f3
- TLSH T1FE31CB207FF90614F3F39E7398BB6B1085BBBAB68E20C61D0140464C1072B04E17AFAB
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.