General
- Target DOC-NDATK5.zip
- Size 961B
- Sample260804-kk16vsgc33
- SHA256 b8d82a9b34f9a6790338fcd784bd01793489c4dd2a9bd1a16ee02554b6048cc7
- MD5 99e9057a97f3e43207c6a454504079e1
- SHA1 bafc60b9b5cc7bf77174108f52af46b861070900
- SHA512 4f5fae54d67bbe894a1fbd6528b440eeb38eb9cb12ea17f6512c265e60ebc21db8ac862ed0e88626bff3decb2f627ded2de1a0acf29e6fe3e4cb35c6a4641e98
- TLSH T17E1154840A028EAFDB02E5F7C426759CA74472C6771BC2977054A1F157A906F8E487AE
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-NDATK5.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-NDATK5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://ma-pdffiller.lat/h/estagio1.php?r=391469FB5D82DB
Targets
-
- Target DOC-NDATK5.lnk
- Size 2KB
- SHA256 d4be6278e8765aa2af2fe9d1aebf04ca28513e7e41479b6d402c7b5ab7d1813d
- MD5 3cc195aa6d3730613416d966610e3216
- SHA1 9643f2586490450e41c26b053b8447928cc74287
- SHA512 60113f5cdd3fd8512c87fcf39325aebc47d149534dbfa7287c3b651d592bc706fd0848982681f4f806550919d3cc34308cb49e6869664108a89f293157cd9e88
- TLSH T1B94103802AEE0194F2FA8E76EDBE2714897B79A55D70D64E0800824D5832B41D9B7B67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.