General
- Target DOC-NM9G29.zip
- Size 585B
- Sample260803-qvf7bs1wbs
- SHA256 3d34ec06df7390a01fc96678bacd6b586c9a352a899287dce110d5c3b157e4ee
- MD5 aaf41b444c8f5d9a8c875831197c8a06
- SHA1 d569ba232eba1d1067e9bd9895e7d918c09cc666
- SHA512 f75e99d05f2c10628d311994e802834bf97755d823c204a0ba42ab226b5453ba94d3858a316ec23e14a84aa2cf2777348dcaedfc12f74e41b214dcf386db3d93
- TLSH T17FF026975242C10CD9F24B3C75371EBC63CE0440662E37DD284A88E50F46C572B01C6B
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NM9G29.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NM9G29.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NM9G29.lnk
- Size 1KB
- SHA256 dc5204957bd5b203e48d5014045c7cde8845cba2f9c9be763c1cd3e736e2f454
- MD5 0c7c216e558c29768ab89f419512cc73
- SHA1 4b152ab5dcb790fead1e4c2ae0f54faf2bf13bf8
- SHA512 6cef3d9f3588e41d73f58814a4fe81a937986771e4f60cd0de50a424004a7d64442cfc3b6d40b4d23f6b254e504281c3a1878d8a7c328684f900fe816438170b
- TLSH T1EE3147503FFD0654F3F38E7795BB571089BBB8569E60C61D4145464C1032A14E17BF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.