General
- Target 09092026_0541_30082026_FACTURA1002903902743-FACTURA1002903902743.hta.zip
- Size 8KB
- Sample260910-cb8kksv1f1
- SHA256 b13a9be2f36bedd67f8f22322bff0ee7dc7986ffbdb094d54c90dd2e3ff04f53
- MD5 45d2d36c78be6b5aa615d408ce9b4ca6
- SHA1 931193bbebf9c62aa9412a1f0a4cd5d642173588
- SHA512 3d93200cd83cf72f2e6e6a09e4278b3ef41cb2e134539fc81f8a5f4e6bdbad0a4d334021d1768bb33ec9ac71a224195e53ee6304800d72759f3827e3b4c72d75
- SSDEEP 192:8LP+qrZRn9jR+18qiRjKFStjWUkDGZpLqtBSItuGrLq/i8C6wpLW6aq:81FRD11jhkDGqtHtl27+cq
- TLSH T10C02BFB706040AEDF89461625FD29CD7AC593619845F002E8F1B21E03C6E073DD26BAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
FACTURA1002903902743/FACTURA1002903902743.hta
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target FACTURA1002903902743/FACTURA1002903902743.hta
- Size 19KB
- SHA256 68cb738a28b463d08e32f5f166418eab407f8e64ccbd55ae2e1896bbf479c9a3
- MD5 36e104e20cc0c4a33008ffdbd56ec7e1
- SHA1 5c483264fa695eace9434779a3d0717e6fb00b19
- SHA512 df0b02b369a2de06a2e20d53b2fa36264263a7debc8e11e8977696bf6506542bf9e5c184643a56c9cf2b7796a60f595e3fa4591cf463bc31fa13b9c721ab4f93
- SSDEEP 192:C0X+q+hY8uZmfiUdpEPnRq29MsFsYlcldBd4/y2n0Sh4ne+WhTQ7riUxdUfGh+7r:C0Z1Ma341SH1eE6p+0c
- TLSH T14E92EAF0AED19C5F928D8633AF7EEAF4507383279580638B91B8F94D069B75B010ED45
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes a VBScript file via the Windows Script Host.