fa31f8fcf9f7c973bba585050f7fa2bb9944d5df1ed20bd2ea12713f77cc470b

Analysis

max time kernel
60s
max time network
49s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 16:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NotaFiscal_-KG6RLT.hta
Size 3KB
Sample260816-thttfa11dt
SHA256 fa31f8fcf9f7c973bba585050f7fa2bb9944d5df1ed20bd2ea12713f77cc470b
MD5 a31313ddfcb6d40e489435b60c1f57c4
SHA1 867d8f55ea704b3875941ca58727ffdc6404206a
SHA512 5abfc057e1e708d2ded579489d2b43e917b7767a978bc443988f254b86b8295e467423d0aaf13a62e9c960c2c3678d76b0c71f73c33feced7c0a9f0e5f896abd
TLSH
T17D6199F37A4642C6BC318A9B6A2F508D149417022366D5FCE3E7DC01EF8DE5949B83D8
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\NotaFiscal_-KG6RLT.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- System Location Discovery: System Language Discovery
PID:5620

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads