User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:d168158bfa5912a15dc32a484943a60a7eb0e90cea70bf59b460c3e829c0f367
General
- Target d168158bfa5912a15dc32a484943a60a7eb0e90cea70bf59b460c3e829c0f367.zip
- Size 820B
- Sample260823-da27vaw1bs
- SHA256 fa33e316f1e267bc00914c21553779d1e55f8f9f0f308eb8fce922c4145affac
- MD5 6f35c75c983819b6ede2c17a190156e8
- SHA1 515a85eed8c7b405a60259e4afda9daa8403c9c1
- SHA512 616fe1edb58666ff566eb9413c9d5ad877e576993024a9303b7a5a03ecc1167e345f61882ca6f34ff89ed03a52c8e80f437f5bd938ec8a4c7cb6faf3cf31ca56
- TLSH T18001867EAE74DC04E12934B211246C64642CE08A0864FFBB5C32D2205C10EC1DFF2051
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Nota_-GVWTQ1.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
Nota_-GVWTQ1.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://fiscal.nfe-online.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target Nota_-GVWTQ1.lnk
- Size 1KB
- SHA256 c9f416236bc54394424ed828a6cc5244319134e818bf884e2b14f00648867ff8
- MD5 efdec05ef79b69640dfbd2d72aa4583f
- SHA1 1169c858de516b154974577cbc581d9aed520aee
- SHA512 7054636f689167afe24004ff6c9ec06f2c6dbe8bbb3ee9655f1fb3095442afe96db1ea7016c7779414a55b06b8afce986dd710da00abed7571457de68382c90b
- TLSH T1D13197003EFD4664F3F78FB698BB671089BBBA668D20CA0E0040494C1062A01E67AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.