ca2877789b698af316ffe68897f9f587603986fefd8f7ba5e71623ae803d6649

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:e7d1d6470042e4b849f6cced07e1313e3ec705ec7668f68fe556eb57444de578

Sharing

Copy URL Twitter E-mail

General

Target
e7d1d6470042e4b849f6cced07e1313e3ec705ec7668f68fe556eb57444de578.zip
Size 813B
Sample260817-zaemfazsax
SHA256 ca2877789b698af316ffe68897f9f587603986fefd8f7ba5e71623ae803d6649
MD5 4e0c966669afecbd22e558a30a51b7e7
SHA1 747d5bf358dc7f633230f0595a2f2ad93d1dd0a2
SHA512 582e8967b4ca53f40a1ad377e70699e556e04a2cc071b02739dead8a33b6efba69937a11aa73d59f200c5de954d08ff198c8875dd9eb68fdb5b63efed2f0261d
TLSH
T13B0175C77918B2A7D0E3AD39FA21209E455F1DBC6F6A8667116C18062466AC35C63E0E
MD5 SHA1 SHA512 TLSH

Score

10^/10

execution

Malware Config

Extracted

Language

Source

URLs

hta.dropper
https://faturaeletronicapt.com/h/estagio1.php?r=2412

Targets

- Target
  Fatura Eletronica-3GMCJP.lnk
- Size 1KB
- SHA256 0f9fe1c32d8f1cc058f2c8dde727c0ad9f44a78b968107e9a52e85bad77d856f
- MD5 13ccc7789aa79b28f4d56eb8333e21b1
- SHA1 9277bf77f4f2f38190eedeaa41e9dc0e171a817b
- SHA512 5c18f09123a1fb86bec4c8f2b59ad8132f20bb7f145658d7e6e765464331994ec3816517e75adfe57c255aba01c1fe770e67183785d7a2974b264d8240e6f8af
- TLSH
  T182317B507BF90624F3F79E7284BB7B2089BF79558E20C62D0080454C1472A15E53AF67
- MD5 SHA1 SHA512 TLSH
Score

10^/10

execution
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Extracted

Targets

Badlisted process makes network request

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2