General
- Target Nota Fiscal Correio-JSRDAM.iso
- Size 46KB
- Sample260803-qx2wtazgpb
- SHA256 ed4fb97743bdf7599221a0711ff0f290a0f7c8de46f4d3178cf4a9e3d65f7f75
- MD5 f31c63da096950dbd26f18bf9ad80aee
- SHA1 9072c48b5ba3c0d5962fb2382b9638822227a95c
- SHA512 c291b833ee05a5f2aebdad195833ba992517445756aa0449b0dbe36b1902b8d942307c94d7d077fbc933e02df266be24623d3b53226bba37cee554f7cedef76a
- SSDEEP 24:5xa6Df2uZAaLhpwklVwR/N3Fz1jYpQlVyUQ/UfvlFsZspO3GT9V6claKumCK1gqh:5xTf3ZRwxmnUTkWTRt8R0RuRGtg2/DN
- TLSH T1AC23CCFBBE4652C1FC3249BF5A2F609954D4260227A1D4F9F28EDC00EF98E4985343D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Nota Fiscal Correio-JSRDAM.hta
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nota Fiscal Correio-JSRDAM.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Nota Fiscal Correio-JSRDAM.iso
- Size 46KB
- SHA256 ed4fb97743bdf7599221a0711ff0f290a0f7c8de46f4d3178cf4a9e3d65f7f75
- MD5 f31c63da096950dbd26f18bf9ad80aee
- SHA1 9072c48b5ba3c0d5962fb2382b9638822227a95c
- SHA512 c291b833ee05a5f2aebdad195833ba992517445756aa0449b0dbe36b1902b8d942307c94d7d077fbc933e02df266be24623d3b53226bba37cee554f7cedef76a
- SSDEEP 24:5xa6Df2uZAaLhpwklVwR/N3Fz1jYpQlVyUQ/UfvlFsZspO3GT9V6claKumCK1gqh:5xTf3ZRwxmnUTkWTRt8R0RuRGtg2/DN
- TLSH T1AC23CCFBBE4652C1FC3249BF5A2F609954D4260227A1D4F9F28EDC00EF98E4985343D8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1