User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:927aeadd6953961c38a21754f31d9985c924fc29affe39bd69730b2de982e9af
General
- Target 927aeadd6953961c38a21754f31d9985c924fc29affe39bd69730b2de982e9af.zip
- Size 810B
- Sample260821-t4elmstdqa
- SHA256 282c48352e9fa623bca63e8b66d27527ce5a9da6e71000dbad915d1ebb47f3b4
- MD5 b05a718b4a5a04849e7aa178acce2a43
- SHA1 da63d4bc66ca5b2cd147ccaba2655272acecbc79
- SHA512 2b6f11b1876f9fd866e5cd6f3b8d8078fa90b253e360943f92d2ade771e3ac323d5e1ab4c2bcf8b0dba931cb4badfa227d0969d2868a8effcb77d9b6cc3ce2e9
- TLSH T1A40141A003DC4E40E9693530F10754C592890EFA17FAB53D8DD8AC9085A9B951CC7857
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
n_FISCA--XB9YI5.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
n_FISCA--XB9YI5.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://doc.nfiscais.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target n_FISCA--XB9YI5.lnk
- Size 1KB
- SHA256 b6a776b8b12f4c1f3ec276e4aa9af20f53f3cda098bae6f47aa7f6780872ca5c
- MD5 b8af5b1e40295d7db42800ef2442780a
- SHA1 08c22ac9291ec50b09b58c9e784bca2ed1cfbaa7
- SHA512 869f8c40c5ad2ce4a62399186798d8bedbc0bee1c8127b55bd92fb887c3894d16cd5db504e8964fcf3aa2e1d536856c5d098ebdabf8601243e8445bdf1ab18b1
- TLSH T1313197002EFD0664F2F38EB6C0BBAB1489BFB8698D21C61D0040454C5022A02E67AF6B
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.