f3d91891349f35a5318bb150a37568f85d1d92790a26aeb7e591f012d087a686

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:73e97da6e651f6631c61c7d2adb48e628db6c6b73a4a39625994b7170cbb525c

Sharing

Copy URL Twitter E-mail

General

Target
73e97da6e651f6631c61c7d2adb48e628db6c6b73a4a39625994b7170cbb525c.zip
Size 813B
Sample260823-e5s34axwds
SHA256 f3d91891349f35a5318bb150a37568f85d1d92790a26aeb7e591f012d087a686
MD5 0d9f3a5a91246968a577d2d88dafa386
SHA1 644d4d8439faa91d7a8b0f36715463c6bf0472db
SHA512 192a5132f092d6395cc528dfe361daddbeece20249bae01f2273efdbaf6ad5c91b143523508d6ad6e6e86e2bf800e6bae604b62eab843611b8eb568db2b3edf3
TLSH
T14A017A6484C50925E7AF0771799B14F25652787357C4F41A0C384C9E8FD5ED1F9175C2
MD5 SHA1 SHA512 TLSH

Score

10^/10

Malware Config

Extracted

Language

Source

URLs

hta.dropper
https://faturaeletronicapt.com/h/estagio1.php?r=2412

Targets

- Target
  Fatura Eletronica-32VR08.lnk
- Size 1KB
- SHA256 f77bd7e3d6d60555dd90e2863107d4f8b7998eb97d3210901b34ab75f5f51f7f
- MD5 2e21d5eec3da4b2897009741ed8a0d65
- SHA1 13154bdc4ab464a7bf0c9e6b53ce0be72d1dea97
- SHA512 02312cdc79bb9262979dc5f2f95a6c19812e873b13472f7254dc25993fc581f7684c50885ef7ce73719d102bb9f3c8bd332ac838c9ff0c5918cf8bd37a1ee04e
- TLSH
  T144317B403BF90614F3F78FB3987B6B1089BFB8568E10C61D0190454C1472A05E93AF77
- MD5 SHA1 SHA512 TLSH
Score

10^/10

adware discovery execution persistence ransomware spyware
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

User tags

Sharing

General

Malware Config

Extracted

Targets

Badlisted process makes network request

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2