User tags
Assigned on submission by the user, not by sandbox detections.
source:malwarebazaar
sha256:108b2d58bb2ea928eea7311630b76613eb6fd729ca25efc3f4cd5881bb1e2079
General
- Target 108b2d58bb2ea928eea7311630b76613eb6fd729ca25efc3f4cd5881bb1e2079.zip
- Size 814B
- Sample260831-arydfabq2y
- SHA256 5639305b7dfec9d18e4797cc057606f5180adf8db3f7ff19470f64e8d417e801
- MD5 5696921b5595def531ff5170d2767a6e
- SHA1 3b14ab6fa138ccc575b1ddba87044b2e49961781
- SHA512 7643540d3d5c27e661fd0a752792379b395afd23ea473b6e808620d023f27d3753670c58d85a575cf3b7eba705fa1919f5c9fe0b90c9187ab6398beaef2de826
- TLSH T1D60175234E05CB01D16900FA592A868E2EB8C9D3988492FA0E87B3B187B5CF40FC3521
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Nota_-KK4MNJ.lnk
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
Nota_-KK4MNJ.lnk
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://fiscal.nfe-online.com/h/estagio1.php?r=391C7CE85D88
Targets
-
- Target Nota_-KK4MNJ.lnk
- Size 1KB
- SHA256 8466c2b9577cc7688e225a258cec3e6e2661b691e0354edb45648abd28d36f13
- MD5 3c3ddfc8e0867a1f1b3bd65bc6f110b5
- SHA1 cb5775424c5a57a4cf763276b6d559e3095cb849
- SHA512 0e2f4503e79842b502ed6b0237113720b98fbe06c2d1e2c2b1daf56ddbf1560837a002ad7fdb648f567aec3da636f500298d96909cb9c0801870b0a86eedaca0
- TLSH T1DD314C103FFD0654F2F38F7684BB57248DBBB8A68D10CA1D4140464C9462A11E97AF77
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.