General
- Target DOC-BRN8KG.zip
- Size 893B
- Sample260804-khyb7a1vew
- SHA256 f9dc7914d3a5c5d507393ca6f9425275815a10b20c3598edeb3c56a2914d2bf7
- MD5 836a90c20d5472207a9c182c081bf37a
- SHA1 a8890a3d0053091f231d13ee82010e1299898fa6
- SHA512 5d25070f4e6f7dc431efceda78dde16542f82ed3a9eada97064f4a01a93e36acc151962deeb8a96b961500f89583c9be72c5494021798d8ca070e452c94c36af
- TLSH T1B11156D515D52C24DB130FB74ABD0203D3EAA00D053A1AABB06CD883D961C326E66866
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-BRN8KG.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-BRN8KG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-BRN8KG.lnk
- Size 2KB
- SHA256 1d9094f1ff2b6f986df6dfbbe6e6ece7e18f8a39fb5ffc55f09e7d624f214a0a
- MD5 a41ddc8a4124368cd86a33c73e294db8
- SHA1 4d6d124960f23db6ab4732f03691821dd05cfd06
- SHA512 5dd26e1f5de456c5756262989b1ad55c0e48b83e072dce21163ad648fd0a7af3955b0db191f2f1294516123ef36db0185f4280b4cbb0c14aacf73592987065cc
- TLSH T19A4149803EEE50E8F3BB9E76DDBE2701487F78524EB1C59D0880820D4422B05D937B63
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.