General
- Target DOC-24RPPX.zip
- Size 590B
- Sample260804-j8vhjsga74
- SHA256 be5d0aebdba57a4bbc9976c7d1ef70193a6ecd3ad307fa3f26624764af2fc76f
- MD5 f9b4fee97ad16d0999b28d66c3ddf753
- SHA1 b4d4d5e8fe5bd78b34cb1f1c5a00d43bd6b2ea71
- SHA512 11d805de91ce5c60957b83f815de745da4c7031f3a011eec79963752c1acf25ab4ba0539df8de7549a66bcab010457efc177958b6cb7b3b7c6005db2d6046e91
- TLSH T118F0E161A234044BEC3D84F0760B35F54FAC180599AB0F8F7A698D08B6E117A1A07953
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-24RPPX.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-24RPPX.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-24RPPX.lnk
- Size 1KB
- SHA256 9fd7d4605b1993da9a53dc380d6b37fad73ca8796f08c5a9f7db7f6ac3ced2c4
- MD5 61c3650b7b91b61b19d67b4183cd48c2
- SHA1 5621026e2e28538c1a2aafdc644b590bea5de040
- SHA512 8528e3c55f9cf039c1aaae90b39fc547c36c0aea23ab0918b4363c3f6151a504bedf5603b8311cf15a9e304b1c9b6f6cea9026ce2c730f2a49af4c8370090ed6
- TLSH T14C3147502FFD0624F3B7CE7799BBA72485BEB8568D20CA2E0141454C9072A16E17BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.