General
- Target DOC-Y5CY6B.zip
- Size 585B
- Sample260803-qvp48scl2v
- SHA256 fb73177ce9147906fca0424703608b68d183506bd74382e60080dff1211399b6
- MD5 2bd4affae44b08ee4a36cf17e309dcc1
- SHA1 afe0d455eb9717d7d1eb7de333d24fd4721a0f64
- SHA512 0ae453fa262ccb3a665f3d7a0e50ebcc590693398c8c9b143c5b57891824c657edb8a8ce045fb68c75ca437112fa1129344c99c3e308878e7ff39fd2af8b2c7d
- TLSH T113F026F28B25CD48C442C579DE57453DAD96234007913DDEA00CF50CEF545D54E53791
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-Y5CY6B.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-Y5CY6B.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-Y5CY6B.lnk
- Size 1KB
- SHA256 ea8ba703c9395e4129cd2be56dee49d64b49e6bf4ea6861e1855cf2dc64ea86c
- MD5 da6bab701c352de1160ccb06e3c17341
- SHA1 e45241e5d0dfc7af31ad910182f79ae2265b2b39
- SHA512 0603c9fa3ab776674c9e079b57e0bce33d70aa6dfa49f0700d36709ff556d8ab52af997303642380e9e38ad11be61cf01c604eec19cf01093badfca5bbc92fa5
- TLSH T1E4317B503FFE0624F3F39E7794BB6B2085BBB9568E21C62E4141464D1032A14E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.