General
- Target DOC-UYOXD5.zip
- Size 851B
- Sample260803-qvyflszflc
- SHA256 b2752b5d066f896107ecd9ae1c40e8c5bbec8cbe3f153ce19e1e0499effbca41
- MD5 d61f9a5146ce297d57675cfc22594f80
- SHA1 44920cc39660b309b3c34fd3e31c21abb6f71da5
- SHA512 8a734cab30ba7184942dc34ea600425eeb9e70a09d733ed433bb2ca0b2dde51646946e24a187d79aa5a04fccc61e308f95c9e63fe1abfa29972e545619d5b9ec
- TLSH T15301D6C346EB043FEB8F71F468623FE091C02BA70F044A2208BAE08B9A5118DBDE0103
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UYOXD5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UYOXD5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-UYOXD5.lnk
- Size 2KB
- SHA256 9e23b6d38fe4818dff9ad2813eeb8cfdc672f56ff41c479568ad24575999773a
- MD5 d71a898d7f69fbaede32ec994318b610
- SHA1 42ad97557aa15d7cf3a49237652b83eb3a38a2a9
- SHA512 9ff524750fdd558e93ba0eed63aed32167db3b48c4bb064bd0995f391651c754c4288e16524c01d7bc51a1abe09e61ec6f792188267f47d30794806ca3af3554
- TLSH T1BC4121802AED01D8F2BB9E76ECBE77108C7BB9525E65C98D0450820D0422B55D977F67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.