General
- Target DOC-3IVE66.zip
- Size 581B
- Sample260803-qv486azfmg
- SHA256 27b04a905bb2f38f190922b77b1d7216327579b2c2ea4095c2aee963987e0991
- MD5 dae95974f38522bcd26b2bd5f424be37
- SHA1 8df199d58d0db8b2abbaedf5a61de2ab5017639f
- SHA512 f22edab9fff3ec7dcca14bfa36eab2a4873a2192b069dcf2df5862f653c77c07b3f55f794c54efd65efef07b424179ac9a47fe78d7b3a89fd7d45d2e74ee1943
- TLSH T162F0269FD302C154ED8844312567776E81DE5380D7973ED5DF59DCC5181447C1D4C2B4
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-3IVE66.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-3IVE66.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-3IVE66.lnk
- Size 1KB
- SHA256 dbb1310a294ab56115d1ff298974620519f6de967ba79e15d6afbfcf7ffda987
- MD5 7300d1c3660ee07c81375d7f74fabc8c
- SHA1 181a3c2fbec10c6e0375c24e91c67ae04d4bf651
- SHA512 cf5c1600032cbcf13697582de45b32174f6c89268ebe18766eddb6d1e94987bb40c06f4ccb4f1df409eeeee8f7f794d6b997dcbd097b705ea26f20529ecfdce7
- TLSH T1653197103FFE0614F3B79E3384BB6B2085BBB9968E20CA2E4040460D1032A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.