fd7b1cd139028222e7865943afe2a3deac81e4e3a7e1c59e2aaa3a74d6e5d6eb

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:bca7b1d7b75c4cad83228cd3733c4277fa953f6a93c6b121c81de2ea2cff7829

Sharing

Copy URL Twitter E-mail

General

Target
bca7b1d7b75c4cad83228cd3733c4277fa953f6a93c6b121c81de2ea2cff7829.zip
Size 1KB
Sample260817-vtmd6sep2t
SHA256 fd7b1cd139028222e7865943afe2a3deac81e4e3a7e1c59e2aaa3a74d6e5d6eb
MD5 3df698605c6c00ec85b69f3b42245eb3
SHA1 f7cfc8db0dccab6e5b3bd81816e025905689d10c
SHA512 ab690328213016741f080fc9173d4a53a70e35b0dbb146f7e8185eb1c7c7ed619e7a9e619cd4e4649a7397431c0f4497ad7a00414d21f939a479e4e4dd7098af
TLSH
T164219A4081521C18E8178EFC128398F92036279096D1AA6F0BD08AF3FDC75575F4A5A7
MD5 SHA1 SHA512 TLSH

Score

10^/10

execution

Malware Config

Extracted

Language

Source

URLs

hta.dropper
https://faturaeletronicapt.com/h/estagio1.php?r=2412

Targets

- Target
  Fatura Eletronica-40VKXG.lnk
- Size 2KB
- SHA256 7bf698b016be922f62e8c6bb320e93092a5ba3636f3c3c7ffebeb61895f298ec
- MD5 e118bd3b9db980d0c677e6a2a2adda37
- SHA1 667f4846fd55bb9fdf74c4b3ae9a022e982088d8
- SHA512 dbd90d583d2bebe4ae0bd953e52d4dc55e2ff4138c2e40768c263984134cf7784a0cec113dd3670aebb01c3bd67a82562193668bd71a8a9c82c20275e5611383
- TLSH
  T1A341378036EE06D8F2FB9E32EDFE2790497FB8516DA0D15D0850814C0821B01E536B77
- MD5 SHA1 SHA512 TLSH
Score

10^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Extracted

Targets

Badlisted process makes network request

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2