General
- Target DOC-PPFK11.zip
- Size 592B
- Sample260804-kb3ckaz1ev
- SHA256 d83ec57ddbac1b38751898801a662e82a7cf393f4c330949be53262f3ccf0d1f
- MD5 739b6f56e34203b222cee6cd3265840b
- SHA1 5da0e3fed5b96658a34fb9d937e8d99158a386a2
- SHA512 1fe03706e47a57b0b1142d8517af50991d1349cbe6660c7befb3ba4a7a001069efa4dc81e3cba642486458d033cb6ddb806c293e9669537f62fca4113de67551
- TLSH T1EDF0E13E1D154255E412F135F43DA89B3030860C62FE3A9EB45CDC9A8D991836894810
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-PPFK11.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-PPFK11.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-PPFK11.lnk
- Size 1KB
- SHA256 4dc03731f1f5324abddf59d1fe4fb779e101174e2d31cd05a1336c0882c867f1
- MD5 6c63fe596e0ed235bd300d8ebddf4567
- SHA1 64a0198ab6205b615bb779be83036ae765fa4b75
- SHA512 06a7ac70cd4997619135fa4b161d4479ae160086de64ae47c4d3367ab8d8c561f610f9a5bf3ef474268bc5195271dbe2c659828c76d60fc5a11ed597764b373d
- TLSH T1713197002FFD0624F3F79E7394BB572085BAB8698D20CA2E0041450C5072A15E13BF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.