General

  • Target
    NotaEletronica--HPRMS0.zip
  • Size 574B
  • Sample260804-pjj86sem6t
  • SHA256 4de89639ee32554c61bd24fabbf8ad8d16742f74e65745f7b793ecf15afc6f03
  • MD5 SHA1 SHA512 TLSH

Malware Config

Extracted

Language
  • hta

Source
URLs
  • hta.dropper

    https://nfe.alfanotas.com/h/estagio1.php?r=391C7CE85D88

Targets

    • Target
      NotaEletronica--HPRMS0.lnk
    • Size 1KB
    • SHA256 3fc1322e0b58d056d023600d7cf19af819cf1bd088cd733393b0b4417c857dc5
    • MD5 SHA1 SHA512 TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks