User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:1414bcc30db4fe1792db2acdb3886394d2bd08bd3f570bd63bb1dca2ea51df8c
General
- Target 1414bcc30db4fe1792db2acdb3886394d2bd08bd3f570bd63bb1dca2ea51df8c.zip
- Size 822B
- Sample260823-d8cd3sdr2v
- SHA256 88e7d2d561bdb9809fc21d3ae40a8f6171b93ba0f08c35e7a44aa8b3842648ab
- MD5 5ca7ec5346d7455155ad559ebacff809
- SHA1 37cbed989f6a5500acadf269a26e196b9c10d533
- SHA512 01ae938ab1e28f19a817a3afed99b2554772bbd40cfef47187da02282882612d40fff1cf57f42dd78e9d9971cf61d875d94621e25f3e76d132af0d658e003485
- TLSH T1F60146CD46442C56F92E9E314F86418A5F0961935697C3C71911217B1D61E4C2BDAF37
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
N_fiscal_-AQE8UP.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
N_fiscal_-AQE8UP.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://documentos.alfatransportes.site/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target N_fiscal_-AQE8UP.lnk
- Size 1KB
- SHA256 fc9193a05a7768860aae2d47c31fcc875f15902905593374781a99ff2e50e249
- MD5 13a361d505e00fb4903e7c5b04dc651b
- SHA1 e1ef902ff393372c6d68ac78baefab1994907fac
- SHA512 93b6451ad3108905e8073ce4a01e336e34bf4bb4173631208a9dcfb88d59253e3548be0ea597551100a7c3c8efe65ad38274189ac24c372b8edf4379edf4ba6f
- TLSH T103319C003FFD0650F3B78E72947B572085BFB8658D20CA1D0041458C1072B02E23AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.