Static task
static1
Behavioral task
behavioral1
Sample
Scanned_CORRECTION-AMENDMENTS EFFECTED_SHIPMENT DOCUMENTS Tuticorin MV GRACE.rar
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Scanned_CORRECTION-AMENDMENTS EFFECTED_SHIPMENT DOCUMENTS Tuticorin MV GRACE.rar
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Scanned_CORRECTION-AMENDMENTS EFFECTED_SHIPMENT DOCUMENTS Tuticorin MV GRACE.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Scanned_CORRECTION-AMENDMENTS EFFECTED_SHIPMENT DOCUMENTS Tuticorin MV GRACE.exe
Resource
win10v2004-20230703-en
General
-
Target
ENTIRE_MESSAGE
-
Size
626KB
-
MD5
e48796bce07474a247555e0215d18e46
-
SHA1
e2f3c099953418188848ca17e4ddb667a84461e5
-
SHA256
0220e410d24938b8ed9455fc059a80530bd658d75ead27a02388f4d5639ce163
-
SHA512
05c5098b2813a73fe4d1b3a4df70d52a296b7a150c056d0256ee2d9bb967ba4ca1e02ebd74d825abae980b0dc72201048d1e9dfe6b58ac19f3622beed9f91a30
-
SSDEEP
12288:h9NhtdL9sWokPPd0tc36rt567QO1po7sRv816MmgJTouOizvu5Vp7wbxgqL0:h3ndL9P10a6ra79boUU1igJoVSKyx10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Scanned_CORRECTION-AMENDMENTS EFFECTED_SHIPMENT DOCUMENTS Tuticorin MV GRACE.exe
Files
-
ENTIRE_MESSAGE.eml
-
Scanned_CORRECTION-AMENDMENTS EFFECTED_SHIPMENT DOCUMENTS Tuticorin MV GRACE.r01.rar
-
Scanned_CORRECTION-AMENDMENTS EFFECTED_SHIPMENT DOCUMENTS Tuticorin MV GRACE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 640KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt