General
- Target DOC-NBDIZ5.zip
- Size 937B
- Sample260803-qvx5vazflb
- SHA256 7825d95b776fd4f4f0cb30b39edadacc6de86a1867a06bf89899476d2c9aaccd
- MD5 df3978b6887be8e4df0579d5d34c27eb
- SHA1 0947c7b20033bd7c0743a54239f7453892419a2b
- SHA512 aacae9f03ac85534c84ff8f2ed9a7adc344c64b14aa34eb9ae5c582059df6e86cbdff52eb7aa5afb639fbcfea8ed3b5ce423306570850f5f1767de8abdbc4083
- TLSH T13F1184B21006739ADA0252FA806D66EE0E36199858A95EEF349CAB5015851AC82C580A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NBDIZ5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NBDIZ5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-NBDIZ5.lnk
- Size 2KB
- SHA256 1d63a684ea9c979277c78b1e6e8577ad6f8c2d565cf5828e12be7ef39fd5090b
- MD5 b0b3ff0be8876497d696f1f4541397ad
- SHA1 116c8329a878397914c50166af1a1ede16d37097
- SHA512 364774cad9169ed6735f8d09142f81268ee6e64ce1e10492de51532afc390670ef3551445d9a13448b7f737f09622bf901502547799f65ea51a72ef6a7867571
- TLSH T1AF4139902AEE018CF2BB9E72DDFE6B4148BFBD525DB0D64D0C40820D1522F85D577B62
- MD5 SHA1 SHA512 TLSH
Score10/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.