General
- Target Nota Fiscal Correio-FCS3TY.iso
- Size 46KB
- Sample260803-qx2wtazgpc
- SHA256 261144f579fa466a48d4e9a01e9d62b8b72d367ddcd2ba4f4ae885d2759b9dea
- MD5 531c1bfec5a168eb0c38ad8f64af7a3a
- SHA1 96e3c0527ca1a56acaec9a6933c9d20f95b8c620
- SHA512 18e5ac3b7f82d833e7b05adeab8f650dfb68a9f0454ea0838fce10cfe8a528144f4ae0f563f9b652e0001abd003a86bd07ff2f51debe0ceed7a1ada3afc46bf8
- SSDEEP 48:5Rkka0jf3ZRwXkS8Z+ATNNjCzWS03TSaHxHY0LzbqlovL+j9VDN:5RfPRw2Z+4Pe8TSExHx/bqlovChVR
- TLSH T1E723A7F3BA0A06C5FC7149BB4B2F609904C426035396D1B9F2AEED04AF89E5945783E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Nota Fiscal Correio-FCS3TY.hta
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nota Fiscal Correio-FCS3TY.hta
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Nota Fiscal Correio-FCS3TY.iso
- Size 46KB
- SHA256 261144f579fa466a48d4e9a01e9d62b8b72d367ddcd2ba4f4ae885d2759b9dea
- MD5 531c1bfec5a168eb0c38ad8f64af7a3a
- SHA1 96e3c0527ca1a56acaec9a6933c9d20f95b8c620
- SHA512 18e5ac3b7f82d833e7b05adeab8f650dfb68a9f0454ea0838fce10cfe8a528144f4ae0f563f9b652e0001abd003a86bd07ff2f51debe0ceed7a1ada3afc46bf8
- SSDEEP 48:5Rkka0jf3ZRwXkS8Z+ATNNjCzWS03TSaHxHY0LzbqlovL+j9VDN:5RfPRw2Z+4Pe8TSExHx/bqlovChVR
- TLSH T1E723A7F3BA0A06C5FC7149BB4B2F609904C426035396D1B9F2AEED04AF89E5945783E8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1