User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:da1fa616c9c00c18c6444dcab1160214d4c3f8afc73b280e2b382bf91035bc49
General
- Target da1fa616c9c00c18c6444dcab1160214d4c3f8afc73b280e2b382bf91035bc49.zip
- Size 813B
- Sample260817-x779xadd66
- SHA256 688064c55bb31ec512d7d347e9151b536554eff90b665dbf9152b29abf2028a4
- MD5 b2868c0f8fbdb370e71873c631c8fa9c
- SHA1 e04b4bad6c8dda34f55b290d7983af5d3c0069b6
- SHA512 cbe259ba2f45ca5ddc78381cba830357c47daf4c365caf39d07eca87d9d3d3c19bd9a0e236e2751823121fe140f7e4fe290469fcb57bff8c05e13cc563410f26
- TLSH T12E017A71EF0415DAF01D507EEF454D933444C5913FD7894A2208552C2C0E9F9F6F2035
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Notaf_-KMOT7J.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
Notaf_-KMOT7J.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://fiscal.nfe-online.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target Notaf_-KMOT7J.lnk
- Size 1KB
- SHA256 ab6716bdda330da145f443587335e64f079e1cf74b2391d046f3509cc321dbc0
- MD5 e65b760744a9521a18d6c8e9e72b1018
- SHA1 3a1e349d3f7aff581654bcb6d18aa74133bde8fa
- SHA512 05b7405c71dde1b28a37fdbbd72f2ad6bdc0bf19ec85463b2a7135ac30c00ea0bd87b9b41e5096632317309ea91e4296b46094184b3ab2aabd6bef01615f81b3
- TLSH T11D319C003FF90664F2F78F7685BB5B1489BFBC558D10C61E0040454D5023A02E63AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.