General
- Target DOC-RB4M0X.zip
- Size 845B
- Sample260803-qv7dhszfnb
- SHA256 003179cda47dd90a9dc8d02765040300fb783e1e5124ccb469c75bc9d03a3f85
- MD5 08a1db8c1c2bfe0c529e02c35e8569e8
- SHA1 a441eef382623ee8276208707ffa3336afcd8a22
- SHA512 6d8a2212c3413781f3383ac109c5cdfe7c7deadbfeed8480ed624052d2507b3cd524471e0a3846487633695c5d60375bc67b8170e25b0da6c259ccbac04395c6
- TLSH T12701868090B38093CEB3A43434546A80B63DE316178EC4A9DCC7DB1DCE1D2F154C1422
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-RB4M0X.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-RB4M0X.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-RB4M0X.lnk
- Size 2KB
- SHA256 208d655d4b7d26891b70b77471e0090b43905033fea489c6403370f4abe410ea
- MD5 751eca08c0583073da982a20b796d64a
- SHA1 63d96e9cb19ad536a802a9f283395b4ba5512317
- SHA512 47f821fb8d589b21b61667523dc7182c4e5727a238b2022eb44a5dbf3ab8b06f6f258867fe9f3b32c151e914eca74181cd6f580bd3e7162c8ec45a5e4b8d44ad
- TLSH T1F44197807BDE05D8F3FB8E36DDBE639609BBB9626D24C54D0410824D0422B10DAB3B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.