Overview

overview

10

Static

static

1

FirmaPeru-SX7PMJ.lnk

windows10-2004-x64

10

FirmaPeru-SX7PMJ.lnk

windows11-ltsc_2024-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:a9b0af52a7fc3d8dfbf05846f9d28f1861d93ea9c321cc069039ae36da4e534f

Sharing

Copy URL Twitter E-mail

General

  • Target
    a9b0af52a7fc3d8dfbf05846f9d28f1861d93ea9c321cc069039ae36da4e534f.zip
  • Size 971B
  • Sample260817-s7ekdatepg
  • SHA256 02b8be91b1089762ae963cd80c97387eaadce0f95119f020ee28bef91413fcc0
  • MD5 SHA1 SHA512 TLSH
Score
10/10
execution

Malware Config

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://m-firma.lat/h/estagio1.php?r=261A6CF54682

Targets

    • Target
      FirmaPeru-SX7PMJ.lnk
    • Size 1KB
    • SHA256 a581862ce679d923c71f2e9ba27a72d8b60399954d11c26c0765a09efe21f4ee
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks