General
- Target DOC-G1LHWS.zip
- Size 589B
- Sample260803-qv4bvscl3z
- SHA256 7c61de6bf840b393eeb3e8cc42d17d5512525352079c8c793d18e41c3987cacd
- MD5 9bb704de3642ac99007e7fe12347ab42
- SHA1 a8d32f88321ee571f66e9f04e0659a29a83330dd
- SHA512 50417a357ffc16e9aff024ea700213bb32d5f0565228ab628badb79e723cef56c97d3fa89ec0b354875fad60d5696bd6380873df1c8185bafc6235c3763ce8b6
- TLSH T10EF041E3532DB23CC420613A80525A362310A886C30086AD63A4AC1E59C14F73B584E3
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-G1LHWS.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-G1LHWS.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-G1LHWS.lnk
- Size 1KB
- SHA256 99f1d44cab5391d3b4c2bc1d945218a215bbe86aff6880a8fd04738af921cbcd
- MD5 b1c078aad2a2539c99e04249208c29ae
- SHA1 390b2360ad9b8a7dd1e305175257f33c6e55813c
- SHA512 ca796052e4ed0c0911071765b81be72ab8a97c8a04c3f1252e52c9c36fc6b217f6f95e9374b518840635e88edeb3cbb5aa6940b5533a26db1ce270c4f23f3e01
- TLSH T1FE3124503BE90654F3B28E7398BB5B1085BFBD668E20C61D41414A4C1472A14E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.