General
- Target DOC-I9SDBN.zip
- Size 585B
- Sample260803-qvmdcaad25
- SHA256 3832dbe1f446e1d5af0bad5e6b4b5977ac37aafa2bd73a042d1acacb98163e0c
- MD5 f006ee5a04bf02a498e9875da3358d2a
- SHA1 358a8ae12329ada47a21cc76db05cb39b02db9f1
- SHA512 2fc70c7af1b3d4f7c8b8acfb5772b6ee9dde6a34ea121c2bc94b70bd96072eac590f3f6bf8c3e9be9941145cab8459bc68f15ad443fda628936bb2cf725fc9be
- TLSH T1AFF041E19312820CF9090434593902B1834919A0010FEBAB87F9F208A9F1250E73A653
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-I9SDBN.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-I9SDBN.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-I9SDBN.lnk
- Size 1KB
- SHA256 9bad6629d449003e8f9297afd593d8b7caf18bb3dd279d6ab4bbe7fa57161df4
- MD5 065031ed58a6756af99285042715cf96
- SHA1 4b47a3dbb107082b1cd65d51b40124a7e83face7
- SHA512 ebab6b68e4d5571357028b60825033b59019e8750d8c3b849e0b1066f79146481df0750dd645bf4337ced3ebd99a54710b19b1a6e96fd23db10a8b2889631e3e
- TLSH T1463197403FFE0614F3F38E3398BB5B1088BBB8568E20C61D0040470C1032A04E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.