General
- Target DOC-PMRY5G.zip
- Size 584B
- Sample260804-kajttsga97
- SHA256 5211c765cccb77e469d96471d0ee3e39f44533d79ba0fbe6ee8b585f5577b5a3
- MD5 a5061afc051ec0c8d17c6aaf24445b3a
- SHA1 2365c13965e96054dffbfa7facbbcab744034787
- SHA512 bb275bd4093a797340ac4a7fecda4e365bcb0ee639d90b4ea3346c4bada67d6d789b7bda7dd04bfca1637874151a6d2693b6af9e847761dda8cd0d2ab8089acc
- TLSH T16CF026910C420544C40AD1F455675E76DD6BC867126F8E0E6639D1087E90FC9B6972F1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PMRY5G.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PMRY5G.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PMRY5G.lnk
- Size 1KB
- SHA256 9a9fb4b1a43dc08943da766362b476468e785b0b9da5c86e2ceb70830fffe96d
- MD5 4d1cda16cee332f3eea093ccb640df83
- SHA1 65289651be9dc5cbaf4bc052bcef08dab59e0abd
- SHA512 485db40730806e09adeb43b66af6315b16a6ea83c4ac854d8a18011d46be396ac8e5e59e44896415cbaa54d61a78da58005e55f1559a0e3af7d57f7ce04e2cce
- TLSH T1F431C0003FEC0624F3F38F7799BB572085BBF9968E20C61D4140450C1132A15E13AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.