General
- Target DOC-M0GHET.zip
- Size 588B
- Sample260803-qvba3sad23
- SHA256 854d2d7c37ca3816e3520aad9003ad16e5c8e5d40f2b7173d425d5cf74cf808e
- MD5 e4b97564eb9edb843aaf525b2ab1053c
- SHA1 18e4b721f6389128488c236d9ae7effc1bcf327b
- SHA512 f640ecc16344a9c784ab9bd15a68f064f3b1dd5606bd16c2e19d7d22fd25c2827b40a0ea7d835e86574386bbdf37d2aa73f8eeb6871d43c89af3aa9f638b03ce
- TLSH T159F0E152A6D305FCDE11C8B492434491C328DA24365E136EF01BD9C52E878ABF581E66
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-M0GHET.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-M0GHET.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-M0GHET.lnk
- Size 1KB
- SHA256 d6e4193fe03dd894d0592a76e78b54ef309d223b9b7c7e7a4e43907934468497
- MD5 20f5fc3e5a906eb5aa07df3008e5dbc1
- SHA1 66b8e7003d4a1d3444a716d3f9ed5aa12dcb469d
- SHA512 cb467d9595c0e5dd1d70c6d00a7433bb7050af5362de612e46bf24de9c05ce7e4e0f0a9058ccf675998f50dc443a16e34bac0ab4acd5bd529727723a34e8d17c
- TLSH T1F7319E503FFD0664F3F78E7798BB5B2085BBB9568E20C62D0191464C1072A14E57BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.