General
- Target DOC-DAHIN5.zip
- Size 583B
- Sample260804-kd1azsvgnf
- SHA256 3ff710df0b580ffaf3549a09ce6b739ebfd25fada528fdfc713d253724d719cb
- MD5 b2aac401a455e14a8fce30f199b3c913
- SHA1 6aa857547de4b81902b8c2f41f419923c34b4f71
- SHA512 a382ceb55d49ca3343682aca53296ae218252005b3c8378c960adb21a7734f0ce896d3cd91d7306e59c30c14d37c3cf2897a39acd3571f453f65118095b6b487
- TLSH T1EAF0E123C586E1CBCD89D471B173B64D481C9684769F2A0CD6B5C10A18666416962173
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DAHIN5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DAHIN5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DAHIN5.lnk
- Size 1KB
- SHA256 7be89d4da56ac6ce5babe8ba35280f3d87e0eed2612ad2731497469d39125951
- MD5 d12b6f49c34dee93b25513c1c3ebff17
- SHA1 b9b1e6c73d85282984ea0e12e0f1e10eeba8224a
- SHA512 fd6d5851c10a014068036cd6ff55d35d3281f4298c8efd978770bba75165c380301bb6e144ec451e62de7bee19190410b9368ad5f1af83b5dbe16626bbe9d167
- TLSH T1323147502FFD0A68F3B38F7698BB572485BAB9598D60CA2E0141454C5022A15E17BF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.