General
- Target DOC-R0P3Y7.zip
- Size 978B
- Sample260803-qvsv5acl2z
- SHA256 be1f51f3527502f19629f2e937ff5a7164af95084062a959639fe31103d52c8e
- MD5 43b10a6ea5d7490ec162600cd4c1dcd9
- SHA1 8677327a0f30264998b463110fded34012a2d773
- SHA512 d4b8427ffa9eefea503be7fec8c691f81188472be7ff978461a1956a5e027310c897e2899a7d69c4d3a7d76d919da66be523996b143184419b01ca2bfcc17993
- TLSH T1FB1194EE494E8441D2A572366006323F05793830D23DDB493C9AA679097AF7C3C6D08A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-R0P3Y7.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-R0P3Y7.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-R0P3Y7.lnk
- Size 2KB
- SHA256 e3e3fccbd0933ca62f1790aab34629a63f1d3b1155048c9eb2df9b39757d7e84
- MD5 8da7c858d32e863696ab4e6e9268abce
- SHA1 55b49f7437601c80a9db97b150b12a2860fa8e34
- SHA512 1627777e1ba698ed03c113ab85b02f77fbee6d7c8d64496580483f337b3779fc915319539c86b6b48e6a432d36342c614cf7fbc051100550e6eda4df98cd7dfd
- TLSH T158514B502BE901A8F3BE8E76EDFE27518ABB7D612DA4C58E0C50810D1831744D977B77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.