General
- Target NotaEletronica--HPRMS0.zip
- Size 574B
- Sample260804-pjj86sem6t
- SHA256 4de89639ee32554c61bd24fabbf8ad8d16742f74e65745f7b793ecf15afc6f03
- MD5 bbd07bb708805cb65e424f1718220520
- SHA1 49896af8b8ccbf30db02905a7b375c6639d2b21a
- SHA512 25e122eaaab25d85afc2e8012bf104e12ba25ed7f269dd6a5ccbba5ee45ce738d7e2521f265339d821794dc8781bee6a3cf8a7dbf12e25bf7067ea11937b3b64
- TLSH T172F0E155D77C5040E4EA617594C552822AA840CFC71BC34D00759186BC2DB896EDA4E2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
NotaEletronica--HPRMS0.lnk
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
NotaEletronica--HPRMS0.lnk
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://nfe.alfanotas.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target NotaEletronica--HPRMS0.lnk
- Size 1KB
- SHA256 3fc1322e0b58d056d023600d7cf19af819cf1bd088cd733393b0b4417c857dc5
- MD5 d8ad243cf9ad9fa87b90cdd6ce78cb43
- SHA1 2b08099dd065deaa2e72b41238e77856ac9c4f6c
- SHA512 78fc02d55a452f202bfc6f6b3c34d00efa8ad8ca2a74144b322afe25223a37a0d3d88ccf84c2d38e96a4634e19b9f9162cff5ecb90ec48d86b9a70ff72032695
- TLSH T1003176003EF90660F3B3DE728077A71489BBB8568E108B1E408406481073A01E17EFB3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.