General
- Target DOC-03NZEH.zip
- Size 949B
- Sample260803-qv7dhs1wcv
- SHA256 15730b84842e50898184d899c2c8c93cc4b6e381371f4dbb571c4a23edb3108e
- MD5 5ef38e5fbcbe3d90834b9151d1486d2d
- SHA1 ece0da225975e9efd134bbe09aa6c6af14f3ea10
- SHA512 abaa53ccf42238aca0b60ff6dac74f6f1152ea01e4085a9aab3a509cdcc0892f628d2733ca13ab85eb83c9da854423b3c5df2512becd0dbe848065c834886654
- TLSH T1E111B764C2039326C5B76AF8ECB73716D537805DF8139EF3103E6B1915689D87D9B814
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-03NZEH.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-03NZEH.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-03NZEH.lnk
- Size 2KB
- SHA256 240f525d8ab33809a4b13081b087d64366cb8315e1bce956739d95b18b7c6c0a
- MD5 361587f2510682a5a830f34e9ccf6f0d
- SHA1 077bbdc6dda1ffed73236776ae9c1bb0284bbefe
- SHA512 d400d18e3c54fedebcfd61c1c314c24887e9d036778b5e5d970725d7e8d791b9d39133f57afac2e57fd370252b090b8f70e1d47acaf5f7aa78e6e1ed3d7ac8d8
- TLSH T14B4149903AFA0599F2FB5E32DCFE27504ABBB9616DB0C54D0C41820C4812B01D9B7B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.