General
- Target DOC-4HGD5Z.zip
- Size 583B
- Sample260803-qvadsacl2t
- SHA256 ec8fa3559a8d7cf33ab24c9093321d1a94c5a7603e0de4fb0c93e43932ca869f
- MD5 156fe950b66b7ee62d9777fd85d50d95
- SHA1 46e65e7016f697a9996b0a7ea396026902a48e4b
- SHA512 da1f0275f6f202bcdb479d0bab1c983fb370a85f90a3835f9c0e0d3d295ed2ee1fa020943c0f418ad8ca42e56bc22a04b1f35bccf9dbc9a17641d23018601870
- TLSH T148F020F8035BB508CB15B9708D32322FC459E06B09CAAD8FF58CD6ED59A0EB305451A6
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4HGD5Z.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4HGD5Z.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-4HGD5Z.lnk
- Size 1KB
- SHA256 eb768eadef7f8c605c0afd6c7ec3a8a305ddfcd0d1f0b34b48a691851d79d765
- MD5 534c563cc894f7491dd25186d190a33a
- SHA1 7ed87a2ec4a630be2171346e77cd4e590cb8297a
- SHA512 7c8f13ae089ec1b36b43fbfdcde294809f3bcb0664ba3658df1c71f036183d71a3596bacd941e05188f2ccdb0ce0c289c75cf7acb9982f475a5949837b448738
- TLSH T1BE3197102FFD0614F3B39EB399BBAB1085BBB9668E20C61D4040460C1432A04E17AFA7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.