User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:340c341142ab2f14bfe49efcf3e78c15be5c1abdb8a796833100b337d7e3238d
General
- Target 340c341142ab2f14bfe49efcf3e78c15be5c1abdb8a796833100b337d7e3238d.zip
- Size 780B
- Sample260822-d28tps1akc
- SHA256 168f35df29217684531f50423b9c4e84b2abe3341cff6142d0f016d11d3c32c4
- MD5 0c64089b2d087e20105f12ed1f8de9a1
- SHA1 4def46133d452955ad9efac375f6e0f5a3a5b876
- SHA512 c7bb6fdca06c67b3565cd4fb04c34da087b33cb8794a4666994804147e597573f8fc4eae33631f58ad484848df1e046940d7bd8d8051c0e6005b3e5057911547
- TLSH T1DB014D279369F25EE011A3323067802DF271B6EAA6C0AF519D0428A0CAAC5FA6DC3461
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Nota_Fiscal--FCWDWG.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
Nota_Fiscal--FCWDWG.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://doc.alfanotas.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target Nota_Fiscal--FCWDWG.lnk
- Size 1KB
- SHA256 b495648ee6e9112f08e33f797eeac99df76cdb5825984ed8dbdc31e72910f430
- MD5 0e56b85f810f55aa4c7690c78a90c375
- SHA1 213c3882d110a84bf73e57d83beec5ef7f27594c
- SHA512 dda40120ab95dfb1f317f40046e11b73d17646d0253e4f1f60703e90c43e0a4fb9542983aa6b5c2c4299b565e1e03d00f41e84f7838d44b823f16157e0837066
- TLSH T1B43171003EFA0660F3B39EB28077A71489FBB85A8E118B1E00840A481473A01E57AFB3
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.