General
- Target DOC-DPUTAO.zip
- Size 820B
- Sample260804-kf9bns1tet
- SHA256 fa7250779a3bdf5cc4125c146424669730779684947a61a1281adb52b7b91967
- MD5 eb2bed11e90f88594a7ceab1b328c801
- SHA1 6dc424d7946d9c3adedb62e8758a1b4da20b40bb
- SHA512 7a5ebda82f63c30a34053af3350c1612b69864cf3b08f5bea4e43e08b6e14f9ac830c07e1091b6883aa252b522a2d7a73c890fa37bfe39fb367abfb606ff5e60
- TLSH T130014627676DA840CA92847710A06D5875E863C41C2B0C9C249EFBC6ED051710E061D1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-DPUTAO.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-DPUTAO.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-DPUTAO.lnk
- Size 2KB
- SHA256 732a174058df479557a55a0b338335a21a8c1cee35072645a26dc0695181479c
- MD5 890668b9450ecfb6d1ef75a09da80cd3
- SHA1 4ea87dff0d4b203454596c95225d56ed9674bf3f
- SHA512 7a28faacb7fa7887805e2ccb815855fb8fa04a5371bc4bd607febe61111d21365306c34524bbdba019387165eda46237205f86baba698ad782423a99aea7d002
- TLSH T11F4137513AEE05D8F3FB9E32DDFAA710457B75625D70C64D0844824C0923B05E83BF56
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.