General
- Target DOC-WV90HP.zip
- Size 590B
- Sample260803-qv7dhscl4w
- SHA256 ffe443431f56211391aca3ab8bbd94a00c2ac455e039c05beae8a679240c3f75
- MD5 69d45458cc66f0b080aeb221f3e7acec
- SHA1 8b8d94733abcf4e12d9da4722a8b24f99241332b
- SHA512 dbea5c30f30ed3d67d147e92609e4bc37969311cdfcd89dd015d15934a98603ee1835f2a1c53c9e736d99544430cf67ef17579bc0821d758f602223df750c4fd
- TLSH T1E8F0961B0C09E247D71F60B00548A11E12BC3988B73AC27732DCD9DE4DACADCAE83750
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-WV90HP.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-WV90HP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-WV90HP.lnk
- Size 1KB
- SHA256 78cdbe7baae05942bf11d525f8af8f3bf4b320ad924aed29ca6fe232b592052a
- MD5 de32a1fd0171e5828d5209c68a5284cc
- SHA1 9aebe041f7d518f86033a175e05094f53bf7d499
- SHA512 0e06dd3f25fe7a3a239544ef0e13ebbd2bcfd03d05b93bd51ea6527b80ac0de75a0724951fe23c75da21a233c540e7267ffa484783877a94fa7469f51d17c725
- TLSH T1013147502FF90658F3B78E7399BB9B2085BBB9668E21C61D01514A4C5032A14E17AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.