General
- Target Nota_xml-P6L50J.zip
- Size 1KB
- Sample260803-p1afasyapc
- SHA256 efa1c776dfe9c366447a1f8dd0be4990b29c7a3651fb3f6d892fe16686a1f2d8
- MD5 b93d40255bf5923c2b36515afc2aa377
- SHA1 9747c3d8667a8dc80e264b2fcf9079e9cb91ba63
- SHA512 1aa0a1bf05a787052ca0e9f61ec8c08170b05d87106ad7f85a3361f2b0e3d013c9b3e61b70a7bb53fd44a4a941305f2a8616f9b789fb84f155b675a808d7fb32
- TLSH T1C121CA1A5B897C23F6592239521E7A8EB86E3A044C9F710071AD74C3AC0506D5305ED4
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Nota_xml-P6L50J.hta
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nota_xml-P6L50J.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Nota_xml-P6L50J.hta
- Size 2KB
- SHA256 86676e0cf3c76db05fe25c7d13d0ad2216a1ca06b0adfd2d879b64ff4edee5a4
- MD5 64fb5f3b3f6f871987fcf9ffef84e16f
- SHA1 e0057edd1c79f25ea886122b23032c3324537ce4
- SHA512 0a449096458b8092bbe2752d2ccf8e06776354a4024ab648658f1de768f3dc91448bd13b8da0510c2fb78c2908fef98672bc206e4fbcfdb3cd645f4c0f64c7db
- TLSH T1B9510FF7BA4642C2BD329A8B1A2F10CD149417022366E4F8E3D7DC01EF89E9E45747D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1