General
- Target 02112026_0910_02112026_2026년 4분기 급여 구조 인상-pdf.rar
- Size 1.7MB
- Sample261102-k5jsbat12l
- SHA256 8dd44bf3d3d22117b7e62b63ae6b9ff0cf6fd4ee4699da78e49c24914a732ca2
- MD5 4f5781fa0bcc4052e857cf97822221d3
- SHA1 8e8a266ec38b4e0316499c3e0939e089233fd3fc
- SHA512 10c7d6379d0892d190da07d79d6ded03902028c5f137506daa265812ef6909b5159458a6ff1105b57856c5bb164382a77f7d2845e7cef97487c26643ba9f94d4
- SSDEEP 49152:sfJEMh2sYXnAbfdpPaXNbF8HKvahFjs0a:2sAxpWNbcKWFjw
- TLSH T1B685332D8A93403E95B993E7B142439452068F1A6EB972DBD1C90FFD8F2DB099C3DC49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
2026년 4분기 급여 구조 인상-pdf.js
Resource
win10v2004-20260911-en
11 signatures
300 seconds
Behavioral task
behavioral2
Sample
2026년 4분기 급여 구조 인상-pdf.js
Resource
win11ltsc2024-20260911-en
11 signatures
300 seconds
Malware Config
Targets
-
- Target 2026년 4분기 급여 구조 인상-pdf.JS
- Size 3.6MB
- SHA256 9ae36574f6ed0b0058bed01d5a5fd5188067ec7c3c5c27b8f253a3190a95eadb
- MD5 c3f52470d3c11703076f4c4c9d7ba461
- SHA1 eab8ec69a7ad855e478c0f792e8089c636f5c7c4
- SHA512 44754aff8b89b8e2cbb137721eb6af2a8f1a01631d10f11800c28b750396fb849198de291bc5da3e86529d6e03ce81c6eb450968a51714da8c55f39d5596edff
- SSDEEP 98304:mxW0/E9VRehvYPSxoLtwPHk+TAYugb/n9n3lSsIlsSTBy7x6hyNtwc:mrEjRcQa/1AYzb/93klFBAp
- TLSH T10906388C507BF735A87C0A5C0BDF1F86063E6E77BB27D93B23245DA66B45B8E2058019
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DonutLoader
-
Family: DonutLoader
DonutLoader is a position-independent code that enables in-memory execution of VBScript, JScript, EXE, DLL files and dotNET assemblies.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL