General
- Target DOC-OG5OFT.zip
- Size 590B
- Sample260803-qvdffazfje
- SHA256 96ed57e33c342cdd2e4b3f8794668e0db52cd19572d1db5e882ee109d4df0149
- MD5 a76e413fc9c31b9621cfe4870b79b94d
- SHA1 379a9950354ebcf7c3c4129b48d05b1a1adf6fca
- SHA512 14b86739e751ca45149709404eea5b043c22f6d9278628a2707841a97e44c2ce018e6735deccedb58570c91d9918d1c78ba2a804c2ad01e3613cb997c7a94739
- TLSH T163F0413248EA6222F800D0777307A3E941A0EFDC80ADCD6D0B19ED794A24C278A1E0D1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-OG5OFT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-OG5OFT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-OG5OFT.lnk
- Size 1KB
- SHA256 853561cf3eeaa3ff91cbe0bce6e60d42eb329414d51cc8f39d20f621af8bd7b7
- MD5 7def498a9b0c60d7d77a763e833fecce
- SHA1 a3e412215b7cc3bc1eb40c7b9bb8f35076dabacb
- SHA512 f6378352bbec8d3440bc82e0538ce578ed0d451056bdedf03fd6711144b870b7638fbd49d994f64b3d6572a32ac158df1a728d1eb54e8e31472be06a2da737a5
- TLSH T11B3197003FF90614F3F38E7398BB6B1088BBB9668E20C61D0140474C1432A04E97AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.