Overview

overview

10

Static

static

1

Nota_Fisca...WN.lnk

windows10-ltsc_2021-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Nota_Fiscal_-PDRAWN.zip
  • Size 547B
  • Sample260813-c6ynvszeph
  • SHA256 3b1b600d4e4838a1f57d84b060d871e18e183b4f3279e60b93c0bb04d4b98315
  • MD5 SHA1 SHA512 TLSH
Score
10/10
executionpersistence

Malware Config

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://sis.notaeletronicaxml.com/h/estagio1.php?r=391C7CE85D88

Targets

    • Target
      Nota_Fiscal_-PDRAWN.lnk
    • Size 1KB
    • SHA256 f0e5fc4c8528710ec4059728a03d832a1937f92033f81b3a80d6f213e937c037
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    executionpersistence

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks