General
- Target DOC-Y4R7XO.zip
- Size 591B
- Sample260803-qvk6aazfkf
- SHA256 3e5dc6f28521d0758ca3acea2b6a5814398ecbf46be96c6cd16b3c8c2744aa72
- MD5 80d1a25613c78fecf688f664d4cf6284
- SHA1 d78981d57d216eb0411e8cf005770f17b6dd7014
- SHA512 c3fe0ec1ad191c2f9ef7f8b196291e1f844e65669ebee69eae752052515296076e90efd1bb588440747ed62864d68b9ecb019c2577349f4e4938b448d1571aa4
- TLSH T107F041E28559580DEC68CAF08A620B1F9E2D4796AC499975403DFC6836208CBF23C468
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y4R7XO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Y4R7XO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-Y4R7XO.lnk
- Size 1KB
- SHA256 cbd9d1a4efa570d0da458552df32094d0ae85a2783d35c1330eb416636ff9a91
- MD5 7b445b587d6e49a0c2d44d6e8086f3c9
- SHA1 90ee2274f02bd5fbc8715029bf482ab1ad4416a5
- SHA512 d68f049a46bf6791e106891b2907463aa50a05c97ea937286ebd1ba0f46a53bad1feca0bd0ef8659aef5f2dc427767f5f8b6a7d446f68a547855cbdb222091d5
- TLSH T1C13197103FFA0655F3B39E3384BB671089BBB9568E20C61D0141460C5432A04E57AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.