General
- Target DOC-FZUW5S.zip
- Size 590B
- Sample260803-qv314acl3y
- SHA256 daaf3bbabce67d033d8aee3036a989ac093a163ce5087b7097e672afc7d6b0d8
- MD5 bd07945aabe73f496c5c609d8c43f0ff
- SHA1 2a567bfb9538de850dd26b9b61bce2801d542779
- SHA512 d89b5f4da628f39d448fba5f5b407417b4dc5d5a0d46c7ee5798df9cb528f1c3e8a9ef6b2819fc7127ca4655022af2eae0684d656ec6961b53b244d57429e106
- TLSH T164F0411673F14C31C0854FFCE5C675554E15C04908C27ADD0A00E4101EBE6C14B8ED3C
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-FZUW5S.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-FZUW5S.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-FZUW5S.lnk
- Size 1KB
- SHA256 0dd422208fd0860933d497d53e8edd163880c3c9a02ceadb6ee5045834a9af34
- MD5 70d787212c5271db5af5bc251904669d
- SHA1 863920ae71d509e78bf9d6cedc95b702364f81f6
- SHA512 3d250235bab26429fc9e32bcc16307538b12217b297c1ded4262def512b8da13eddaf9a177fe831e8e9376cb485d86ae4dde50ad41561c7d4f4aeb557aa8e23b
- TLSH T18E317B503FFD0664F3F79E7394BB5B2095BBB8568E20C61D0141474C1032A15E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.