General
- Target DOC-4KJK6Q.zip
- Size 906B
- Sample260804-j73sjavdmh
- SHA256 20c45965b73d5c5ecb2b8621dfceec02dce4971743813e279564ccf2af0587b6
- MD5 efb84d50d5250524836decad127d4ccb
- SHA1 9e07323aa9e21e9e822bdce31ca15411a752d80f
- SHA512 f8ead793b5424d095d40ccf1350f15268d5e97a98f47ff895d2d52e62688ae28607c1835204b5b5d6942e653ee87aafbacae31af491424bda2f3c6a2c0662ab0
- TLSH T12111B7FA19A104D2D2A1D6B51F0599C9295C3B841A1DD2418414BF0079FF71C3C6C3DA
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-4KJK6Q.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-4KJK6Q.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-4KJK6Q.lnk
- Size 2KB
- SHA256 6e2e381c495787a21da4873f5db9dc87f1960257b283ed96c51e3e0542f8d7d5
- MD5 d05a92d17da8b1a4e76ed6a1ef5d9b46
- SHA1 a32b417e8ad4393e1e63ba395fc8613b8653f54e
- SHA512 670f5c0918e41c6d79a259389b08a9fbde627d284e682bdfeb83d7c7bfd6a17d6671fa35d0297ef0f67084210f775cba7b9548bce3cd29b9007e50d2008476de
- TLSH T1E24106902EE944D4F2BBAE76EEFE6341487BB9515E70C64D0C40820E1422F44D977B73
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.