General
- Target DOC-DPNV1E.zip
- Size 849B
- Sample260804-kacqhsar5t
- SHA256 a581b83e7f57eeba2427b6cb0a58a26aa067b2c1841ed28f0d9259f1b10be47d
- MD5 7ca215ca38ddc42a2ddf31aaa913cf34
- SHA1 a69508a8dc5d36fb5c5f6854ce29a2ef28e9dc1b
- SHA512 a58b05614959f97e47931ffd6e55e226dbb0408b642e2a894c8a451c58bc9bde48c79ec4fdce7bc7821972757c5495030dd7dd8c89bca90db40be51a92007d13
- TLSH T1B90152466164E561D69BDBF800B588ED1581D082E46EDDDA142CE9943B683A89CAE418
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DPNV1E.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DPNV1E.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DPNV1E.lnk
- Size 2KB
- SHA256 743b17a770dac5ca01e8f66e2c7552f801ad9c2e7399a33013529dcd4662c99c
- MD5 379d6ce14595b6a6705669a5db882cae
- SHA1 d18494660122342a46295fd498cd9793350a64cc
- SHA512 dbfc46f30d8a76cb72b3ff62be060a441a8ac8ace2e64e5f20575231caa123893bc9440a0cd578e9cbdc4900123490469ecb4efad96600a0f541c44c66f47f01
- TLSH T1B0417C403BF804E8F2BB9E37D9FB6751887BB8556D20C6AD0840815D1921F02D973B32
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.