General
- Target DOC-H2OMVB.zip
- Size 594B
- Sample260803-qvrm3acl2x
- SHA256 eb10be139f81a417add3d7c3cd22f405140095632aec08f74a21d7f675a7f967
- MD5 e92ff9a133c05a60a9a7087eace91a55
- SHA1 3ec8456ca948c274e2e83b60430345e21f41b31b
- SHA512 7c99a4727fc85691322f8ed1eaa4a7f3f1dd16c3dd55bbb402fae20c6f11b5f9e98d202750719be9c22a37be8d9568edd6e3cad27d94d804916cf27a15651992
- TLSH T1EDF0AC5EE3958885EA0985BD5A64223C26698C75A23AADC54F21FB96986042E0E148E8
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-H2OMVB.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-H2OMVB.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-H2OMVB.lnk
- Size 1KB
- SHA256 4b4e5f68ba3b719cd47135c7ebd767103894396ae1cb47baa69b968419f0ae97
- MD5 857ac767db6006823b502dafa1bc0b24
- SHA1 79c915a5c8c49dabd1baf49bc6300e1b0a83b21d
- SHA512 2b327b8fe49bd689d19ce6780b6fe56fd7daf47941ccf8962bffc5c56c0852fa440ac10fccf8af084c0574e755f70eff71ef0edf7599c73fa94821bf8630128e
- TLSH T131314C503FFD0A14F3B78E7394BBAB1095BBB9569E20C61E0141464D1072614E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.