User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:05692c5e3cba38e608bcbdce866e7b1dc887add796b48d85671934546e38fbc0
General
- Target 05692c5e3cba38e608bcbdce866e7b1dc887add796b48d85671934546e38fbc0.zip
- Size 829B
- Sample260816-rd67vszwet
- SHA256 322add44600fef5a0e53652168330b7a9973ca7a19432e9bb193d4a3a0ff4ff1
- MD5 eeeeaf9bf158ac79e5835ed6dfdb2b22
- SHA1 647b8fa31d9ef0115e24f8809ab531a06bbbe2c4
- SHA512 126e24fa13fa75906c8899679edbd761bd4fae6d287b37014f8655e988c1a1403ab536c03107dfcf8ed79fe75f24e950170f262c0ae8c2d7a8d7612fec40da13
- TLSH T13B015224778BC929D11250B010C3A491E8D85910A2D2133D60880C702A25EE2EE26379
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Nota_-P2300I.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
Nota_-P2300I.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://fiscal.nfe-online.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target Nota_-P2300I.lnk
- Size 1KB
- SHA256 cbb2ccc5f4472b84ef54b2a4053808669eaf6f9454e184bdba4556eab01f9e02
- MD5 f84f274e1c3937f5f99290b2ecff76d1
- SHA1 ea720b86daf6746c1aa9e9bb6cb9673644abda70
- SHA512 c4db7e5e98b10a57efde0bc05a0e6c041ac50f40b78135e9fe39770e7058caa30c4d94c8fe7990088b72f524abb695a27c70e0bc4da9fefe7aff80357e9df676
- TLSH T1053168002EFD4650F3F68FB688BB672089BBFA668E108A1E0140454D1072A05E57AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.