Overview

overview

8

Static

static

8

Nota Fisca...ca.msi

windows7_x64

8

Nota Fisca...ca.msi

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Nota Fiscal Eletronica.msi
  • Size 543KB
  • Sample200710-1f5l4dlef6
  • SHA256 533e5aced548178da1ba313246e0335fc73d228135ab56f40a1b4bc72fc0a134
  • MD5 SHA1 SHA512
Score
8/10
evasionmacropersistencespywaretrojan

Malware Config

Targets

    • Target
      Nota Fiscal Eletronica.msi
    • Size 543KB
    • SHA256 533e5aced548178da1ba313246e0335fc73d228135ab56f40a1b4bc72fc0a134
    • MD5 SHA1 SHA512
    Score
    8/10
    macroevasionspywaretrojanpersistence

    • Blacklisted process makes network request

    • Suspicious Office macro

      Office document equipped with 4.0 macros.

      macro

    • Loads dropped DLL

    • Adds Run entry to start application

      persistence

    • Enumerates connected drives

    • Modifies system certificate store

      evasionspywaretrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks