General
- Target DOC-PYU13I.zip
- Size 953B
- Sample260804-j8vhjsga72
- SHA256 1dfffdd887449b4e40ad5c58d3f64dff1676090762a15c7ecdd3248f625cfa62
- MD5 ea4d188f4871e2f06ee561d07737ec31
- SHA1 db6f4a82bd06c7389f1d7e996ff25ae1ff82946e
- SHA512 bac45fc91febc77c5b2ad68b1deda14c1b513ccf5faf58450f28af1095cd81ae9b328df11d55246233ffcc432ae14e4c92a5a6584516cd052d86d822b2a68a63
- TLSH T18411C8F1230489D3EA12D63C9C4A29804B42B06A830D731A971DD4037C10D58DF2B6C2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PYU13I.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PYU13I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PYU13I.lnk
- Size 2KB
- SHA256 1b85284c78426671e2a1c4919ee08bfca603497e1ddba8665f10d8e1139b2ad1
- MD5 87279647548f0b644485ece3ec8d1139
- SHA1 327e8daaa8080314acff083e252423939e185224
- SHA512 2d8f060a1fa3d078f61316ad675cbfd091d3ef5c660e5fb11bafc20321d022ef9667f7fe7c6a2b9b777b60cbe55cc9045a5df6be8c8796029c29af3be3e91095
- TLSH T1664147802AE941D8F2FB9E76EDFE675248BBB9926D70C65D4440820E0836F01DD73B17
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.