General
- Target Nota_Fiscal--GYV752.zip
- Size 1KB
- Sample260806-akcs6ayhkh
- SHA256 3c9ebb8eec9851d52cc2ebd6a7b27c078d9bcb4c21f6cb1be1c0c9cbc32d2c60
- MD5 2113bcd83ea53baaa61d971db9b9845f
- SHA1 989239f27e7e340de854813caa6de01714f6fd18
- SHA512 5cfc0280f760a37bdf18c1be50d09afc7abb43801768d92d48db2cc5573dca9a158e945058ab527a325ef8fd7b191beaa5a181ed16bf6049a84bf1d3fecf6c1b
- TLSH T12921B75ED0E40011D57569A884A73BB14DFE070BC56313CEBEAAC1302B232B6461F51C
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Nota_Fiscal--GYV752.hta
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Nota_Fiscal--GYV752.hta
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Nota_Fiscal--GYV752.hta
- Size 3KB
- SHA256 619020e63dffa52d98274465d92103f7f06410b0171e86181f1bcc4e89cfb3a0
- MD5 691c0426162458a42c4b8c45aea0e56d
- SHA1 a0088a897c7956b0259434c7144450a2e8a43937
- SHA512 1417c352efd5ce5702a6e4a102a2d91f4796c236798eb194467d01eef23706a6f673762d9c74f0a428a2477a201e6491c560de0fa7541acf445a5ca594920fe2
- TLSH T1AD51FDF3B95A46D6BC3199AB5A6F508D149416022362E0B8E7D6DC01EF8CF5D41B83D8
- MD5 SHA1 SHA512 TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1