General
- Target DOC-BRFLDX.zip
- Size 589B
- Sample260804-khfr5sbl3z
- SHA256 6ae07dbc9552fe81dba9ec41915bd6887a934ed595ad5456bb648473d01d922e
- MD5 024d2ac310baa2b413c2e68376fe2cf3
- SHA1 3478cc6d204bfa3f4d287ecdaa1712cd697fa611
- SHA512 76a372aa22e559c37e9810995d044398ffe540e10ab650f5bc197724b9888a3cc56ebf08a499e1adb7845087350cab5787ac64eb448557676748f647abef95b0
- TLSH T172F0E1B30FD59506D60FC1BFE03B7CA64BE4CD5B266B4182441CFD290850E911E7B4AC
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BRFLDX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BRFLDX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BRFLDX.lnk
- Size 1KB
- SHA256 c4f03cf1ae7ef871c5be523725a053d9b92a7d8de95817713ac2dd48911beb4e
- MD5 0a0c3d8f22521004a1b7b86e1f764fac
- SHA1 782848418aed974aff420c7582ae9b755a9fffb9
- SHA512 a514fb894c5bae9716d1b76271f3f595e8e3780bc0613d0b43c3e57cc71c12c70f4eb7dc8fb4be229f570544942908006f86e51a6633a0f1942c0910d6b54193
- TLSH T12A3197403FFC0A24F3F38F7284BB572085BAB8A68E20CA2D0041450C1022A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.