General
- Target DOC-T9PU0O.zip
- Size 917B
- Sample260803-qwp6macl6z
- SHA256 4a60fa90a4735524d24a681c010b825f3747779a24f9a062b9437073a1cdc845
- MD5 0a74c7bab4e8b7a7d6a0cb541a54cd0b
- SHA1 882ce9f9f6e3a55129685c55181570681622afa6
- SHA512 427eb547d6d6f2e465f203e402418e22dd7d8bd78f4d11e2ab514cf333f4ca5c0d975f954401f83034f22fd9f67fabf23358ea36e5380639b641105b306c0aae
- TLSH T1951188A7632F4088C54599F55E911A5206FDC4D474190F072AFABD5D000488F2A1C95A
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-T9PU0O.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-T9PU0O.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-T9PU0O.lnk
- Size 2KB
- SHA256 49b9a6e06f3ae91f350d8a21ba017ed3bab5eb94029f1d8970668f1b37872d64
- MD5 082f4b48803f6a70cb97fc30418df327
- SHA1 8eb233b3b7c3a1ce684c37983c1f7598d0c4a8fc
- SHA512 d5fcd057533d451e670a3d97dece1263d7a5ba92a5126a50bca93f00facb2cfb79e4fcbd9a20b104209bcb07ef446a9c1f4ebc9c0211d76977478720c4a4185a
- TLSH T17C41E3903AEA41D8F2BB9E72ECBA6B5145BBBD565DA1C18C0C50C10C2822B05D5B6B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.