User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:5730dd923fd8f40af1a51d374d5b7fe3e069ac94f99d574ac3998f3e34abef8d
General
- Target 5730dd923fd8f40af1a51d374d5b7fe3e069ac94f99d574ac3998f3e34abef8d.zip
- Size 812B
- Sample260823-a6767adk6x
- SHA256 69188a23b3b333af47220cfbc2012e918f7faf499298cf44ea77ce77ced9a244
- MD5 df03868a771f95fc2716580dae69e971
- SHA1 cdf801fc1621f8af4dea0e3e353288cd06cd72ea
- SHA512 796cc892e6e40f5e2d06d93070eb8891bc68e359ed6ec8bb0b30a58669b072f15fbc9a99aa772e01ce492b874472d5ecce89d10f2d8cbecd5a1d620a987f241d
- TLSH T1E501F6B52D1F5943FAB36E744605829D3168B1A24F826507F47511973C477D30EDD439
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
nfe_-6LMP73.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
nfe_-6LMP73.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://doc.nfe-online.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target nfe_-6LMP73.lnk
- Size 1KB
- SHA256 24e7eccd3305a3f76219ba2e401daafc7c36cb9d376da548f5e70266441294ba
- MD5 a38c419e2cc63b7880a714c1ee76b60a
- SHA1 d3135b328640ced166a91f18727436fd1bc23b43
- SHA512 e515e4a76d1ec1983f828b6b5e9141316516912196ced6342af26d93b28c8dda62cf9f637c72b72ad8d875a1a9320b34dbd6020bb27fe4221eb7cc39995756d1
- TLSH T1A53197007EFE0654F3F78FB6847B571089BBF8668D219A1D0041454D6462A12E67AFB7
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.