39c73be0dd98c2274592192fd22547c00ebbb6da7d0fe326419b2fb71346d862

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:1601418250b3b85745e82887be6b0e325df099d5b5973075fafefe583d81d363

Sharing

Copy URL Twitter E-mail

General

Target
1601418250b3b85745e82887be6b0e325df099d5b5973075fafefe583d81d363.zip
Size 1KB
Sample260823-d95f9adr3w
SHA256 39c73be0dd98c2274592192fd22547c00ebbb6da7d0fe326419b2fb71346d862
MD5 2f0f386c75d1bea0be49ac7ad8b2f3b9
SHA1 4261a3bb1bdcaccdfed1d1e2be9ea6bd842e5fb6
SHA512 8715e18bd9a45a19c7eb4af8801d80c73da87891e46fd40863fc554548df85ee55c0751d91ddafa99a9b398acd73e488c50be3db354e5667e3b672ea189a3896
TLSH
T1DC21A79A2362BA58D186E23A7670490E21F752A94136C29F1183DA1C08A39DCBF18E15
MD5 SHA1 SHA512 TLSH

Score

10^/10

Malware Config

Extracted

Language

Source

URLs

hta.dropper
https://faturaeletronicapt.com/h/estagio1.php?r=2412

Targets

- Target
  Fatura Eletronica-JV8HRF.lnk
- Size 2KB
- SHA256 a309f2857971779c4743e9d89d4faa598ea73ae945a6186e22058d49abd9bbee
- MD5 170d3e6f3ff8aa736cc9b5c354dbaf90
- SHA1 3e7d693b627a78a17223e615a537e8818fb948b1
- SHA512 1dd0be9dc12616191e33d3475e5c21b45600208e90c285d8b8a8b92bb3debcc9e70c8dfea9742f6ef175cf8e4e2047872a403e239d511432d97c02b181417d50
- TLSH
  T14F41F5403BEA15E8F2FB5F72EDFA6750497BBC529D60C68D0850824C0922B41D9B7B7B
- MD5 SHA1 SHA512 TLSH
Score

10^/10

adware execution persistence ransomware spyware defense_evasion
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Extracted

Targets

Badlisted process makes network request

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2