Overview

overview

10

Static

static

1

FirmaPeru-P2IVXH.lnk

windows10-2004-x64

10

FirmaPeru-P2IVXH.lnk

windows11-ltsc_2024-x64

10

User tags

Assigned on submission by the user, not by sandbox detections.

source:malwarebazaar sha256:37e3bb735b5a45b0aec1cdca29c8868de72dbcb2bb932e6c6de51b0caa68361d

Sharing

Copy URL Twitter E-mail

General

  • Target
    37e3bb735b5a45b0aec1cdca29c8868de72dbcb2bb932e6c6de51b0caa68361d.zip
  • Size 1KB
  • Sample260831-14th5aae65
  • SHA256 244fbdf06c4fa3b531421417129ef0a7c749b3e4b85e11954f2a263025d68eeb
  • MD5 SHA1 SHA512 TLSH
Score
10/10
execution

Malware Config

Extracted

Language

  • hta

Source
URLs
  • hta.dropper

    https://m-firma.lat/h/estagio1.php?r=261A6CF54682

Targets

    • Target
      FirmaPeru-P2IVXH.lnk
    • Size 2KB
    • SHA256 6c142336b366841f730484375588b5e7b8ce614000251dd0c592dbe24b30a538
    • MD5 SHA1 SHA512 TLSH
    Score
    10/10
    execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks