General
- Target DOC-NP407B.zip
- Size 580B
- Sample260803-qvblvazerh
- SHA256 7c66bfef766c1dc836cac6778cac6e7d57d69ad39e182f62655cdb008070b490
- MD5 3d498ac4f59c69459f712e1216a5c451
- SHA1 67bc21663fa81bc6b09c3ebdd67df90b4477ac69
- SHA512 701414b4eb0a238c3c277157d471ef69171eb6aae610e1d626cfa9d3ab8bd7587a349c530de9e703877ce7f95d770a8538f330acdbefb48029245f4c07d68e29
- TLSH T179F02065D7824008DA438CB8AA6B636CE26ED3591B3CA9D369A8F000BD52C75560C967
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NP407B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NP407B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NP407B.lnk
- Size 1KB
- SHA256 78bf03c803e13ec700cb3b5dd0ce758da62e8869a008dd62243c045b76523e1e
- MD5 42967bd9389718a2cfbd6b42569d45b0
- SHA1 531903b5b9fb9aa6605853b818c2e1a18ff65a37
- SHA512 e06c31013acf38744815181087769bd68252eed9bad9729f369c54ca84692c9f736aa0ff1c577e4e3ddd1929610d9fc0ba2e54155df364b127912a9564b0c372
- TLSH T1073147502FF90654F3B78E7398BB5B2085BFB8969E20C62D4141464C1032A14E1BAF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.