General
- Target DOC-UMNHAT.zip
- Size 589B
- Sample260804-kf5y9abk9t
- SHA256 6d13f079c79cb757ebe9c8a1c0f8bc2d48969fe0e02e39048ce66542494fd53e
- MD5 41886c7752c4fb62da312b561d622ad7
- SHA1 eeb2f31c53ada1b571a4f9e56d09e9b3fd5b29a7
- SHA512 083badc900a84104ef6ba08daf84d09a84c8fa36cea54d6b03644527b038fad40be45c44242701a7d1ef80a1b3d7d58118cea63e2b310e6abd92c558da6a3647
- TLSH T149F0E11645E8646ADF4391F5211652CE4E44AA46A90B4E7B5518CD8A34389B93F07461
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-UMNHAT.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-UMNHAT.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-UMNHAT.lnk
- Size 1KB
- SHA256 001e36be446ba9b3f781f0f753baacfcbf53e216d0622e8f7986b5ed1ceddd68
- MD5 ad7fa08194c4f4047b628bf9b095a920
- SHA1 135fd7819e248c847d63d6b52f501fbca93eefa4
- SHA512 5a450ee60cc35190346bf763f85ec10802e4aaf188c193eb0eda67d0872d16c9427f6966d590f80f5b946d448ff2bf9f82d2502db3ff4960297d6b4a6746276d
- TLSH T11D3147502FED0624F3F78F7798BB5B2485BEB8698D21C62D4141454C5072A15E13AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.