Booking Confirmation 06212029746647134765750[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Booking Confirmation 06212029746647134765750.exe
Size 2.9MB
Sample210621-phrh4b5ysj
SHA256 b287146aa5bc1a100bd475d8a1a0fd61f9910dd514b4e11dfb62ef4cf769cacf
MD5 452bac7c60bc10c0a1f483848a6d278c
SHA1 8163903a2bf4e7cf766598589d57af014154e048
SHA512 fb3018d63e5075221087bccdf19b896a9af9e4d655e1373da88eec2c85d206b48cd9e91a2d465ce0e247da4dd8524cdfd0bf0242b6c47af31ebbbf9deaeb6ac7
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

File Explorer

Booking Confirmation 06212029746647134765750.exe

.exe 2.9MB

Booking Confirmation 06212029746647134765750.exe

SHA256 b287146aa5bc1a100bd475d8a1a0fd61f9910dd514b4e11dfb62ef4cf769cacf
MD5 452bac7c60bc10c0a1f483848a6d278c
SHA1 8163903a2bf4e7cf766598589d57af014154e048
SHA512 fb3018d63e5075221087bccdf19b896a9af9e4d655e1373da88eec2c85d206b48cd9e91a2d465ce0e247da4dd8524cdfd0bf0242b6c47af31ebbbf9deaeb6ac7
MD5 SHA1 SHA512

windows x86

NSIS installer

installer