8c4dd378f70d9ad75e5a3052b4e176c1e30da8161a7b1cfa6d150a367b4e5b85

Analysis

max time kernel
60s
max time network
59s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 11:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NotaFiscal_-U87HW8.hta
Size 2KB
Sample260821-nc1rxadj81
SHA256 8c4dd378f70d9ad75e5a3052b4e176c1e30da8161a7b1cfa6d150a367b4e5b85
MD5 83cbe14a787684692b60a1c6725ace2d
SHA1 8f8e35e786133cc2a7108131e163da9aeedb62bb
SHA512 0bd37850b88caf2e06429d10d061453960ca6706382d0cc4928f20a83aabbeb66061500ca9254889c742a17e75a7c1006e118a84ef88f720ba89636d77b6106b
TLSH
T16651CEF3BA5257D2BC32199F5A6F508C14E41A032364D0B8FA86DD00FF98A5D85743E4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\NotaFiscal_-U87HW8.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
- System Location Discovery: System Language Discovery
PID:5588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads