General
- Target DOC-D34G5H.zip
- Size 589B
- Sample260803-qwpj4a1wf1
- SHA256 ec5c516fbd8518af438c6d106297e3496be834266b5b1ca708073ab78af4b1be
- MD5 da4ca5eaa9c390df317b0abe9838a532
- SHA1 fff586a78c96f0ab20b97c24557e44688f2f3b94
- SHA512 9eafb41629fe5b2b7ae5f400612566e8e974ba613482ad226e8d2f9d44a63d1491f8ca7c320c7d45ff2af64f81b936544e762b8a03dd4978d6d4ee002e8aa760
- TLSH T18CF0417301697204C273053BC963496BAB1A422A65492BD81999C8685AFC822B98AD94
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-D34G5H.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-D34G5H.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-D34G5H.lnk
- Size 1KB
- SHA256 f2ef775b2afa3a00859c4b7c4c8d246fba97b2533f9fb8146adaeeded3e4dd7e
- MD5 a1bf9bbc2e21063907bc859886622f5c
- SHA1 66fcf1a866077183bf37fcee4bb5e85b8c6ae2b9
- SHA512 3eaf793ec475b73321ecbd2b9f87fca5b2c30711b58e1fee6b6bc0b4c5b96074b85b94c30888eb5d37a26650a6491cb7de735400f09374680252d96503b7d49e
- TLSH T1AC317B503FF90654F3F38E7794BB5B2095BBB8968E60CA1E4141464C5032A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.