General
- Target DOC-R6WQO0.zip
- Size 592B
- Sample260804-j73sjazydt
- SHA256 3907105ae3c6034f214201d0e23a8e57b9bea768bcfc44b8d34488335e8cf601
- MD5 4376e9c7271dce1f37dfd9cc845c1e26
- SHA1 19f329bf05a7ef06db63ab40ec986173a88f7321
- SHA512 9e70c5ef62f9c6295695ca8b851675b0d4db41b00871fcf58d4308054aec486c163d449d352ebd451727c7c4d76627183ca6d7a49a09475072fdca6dc55a2e3a
- TLSH T109F0479207828080FB26D87238003A2DE325654018FE7E7F455EF54238B55D756401FE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-R6WQO0.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-R6WQO0.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-R6WQO0.lnk
- Size 1KB
- SHA256 afd2a4cfb07c7b54fd7429f23bf13cf5e27b4a1efa468debb95f2924fc634ca7
- MD5 4db0a393744c8a091567e6371f7d4292
- SHA1 9c32b4a46133aecc96972fcbb4080dbdec34ebb7
- SHA512 932ee830f185593804f0a8a0df10b3a9ba215600e5480752db3daeddc23348f74195b3d70ac9d93e935c0a1f60aa522c2efd6ba4e06a40d2cbf65646e2388455
- TLSH T1F3317B503FF90614F3F38E7398BB572085BBB9668E24C61E0151464C1472A14E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.