User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:c2ef9341ab1575f9e7981998f6fb1bac1aace93a9c6193867777ab9ae28761e8
General
- Target c2ef9341ab1575f9e7981998f6fb1bac1aace93a9c6193867777ab9ae28761e8.zip
- Size 780B
- Sample260818-sppbvsdj7s
- SHA256 104ad01d1ca5ce4bdab200ce6e1611da98d7862f00f7348822969b66cae44616
- MD5 17b3736acd51e7288b6837a36aebba94
- SHA1 0fa98a359e7663ad02daf445816c8431bc1927e0
- SHA512 366cc3ad0efc16846e5b4914ced2fed081241d0b5f0e2b85177fa0d3e266e12eb168a2d367b9481e369bf4ece5580ef24f8b68fd1957eff10247b46e6b0b9181
- TLSH T13101656163E43901E4C177B9D0995DAD39CF0D512FC43D9355BB7C1949A16B383874B1
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Nota_Fiscal--1FZIT2.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
Nota_Fiscal--1FZIT2.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://doc.alfanotas.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target Nota_Fiscal--1FZIT2.lnk
- Size 1KB
- SHA256 b495648ee6e9112f08e33f797eeac99df76cdb5825984ed8dbdc31e72910f430
- MD5 0e56b85f810f55aa4c7690c78a90c375
- SHA1 213c3882d110a84bf73e57d83beec5ef7f27594c
- SHA512 dda40120ab95dfb1f317f40046e11b73d17646d0253e4f1f60703e90c43e0a4fb9542983aa6b5c2c4299b565e1e03d00f41e84f7838d44b823f16157e0837066
- TLSH T1B43171003EFA0660F3B39EB28077A71489FBB85A8E118B1E00840A481473A01E57AFB3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.