Resubmissions

21/08/2023, 13:59

230821-ralfzsdb68 6

21/08/2023, 13:55

230821-q8gp1sdb54 3

General

  • Target

    Nova pasta.zip

  • Size

    1.2MB

  • MD5

    bfad8760279cc6aada73ca7813d6cb39

  • SHA1

    2cadce6efa3439db0260740f2f95b0c528b58d6e

  • SHA256

    fc5b49657185251a8694cf4355cdb9b9c3e8a4fe234e4b42c93bea1d9433a805

  • SHA512

    aea09cc9c746c23ce451f0d512375b2e68049ecbb898d84d31732b2985bdff4f479ac2b82bb18667f6aba94cd385290d1a921b1fd7b7ecad89f7c5b5edcbbd76

  • SSDEEP

    24576:wx8IBGPA/k8CpSMdTViByeio8V4iZZBLiByeio8V4iZZBNxGw+qvJiZKxi7V:wNd/ioaLZrYioaLZrLGjqIYYp

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Nova pasta.zip
    .zip
  • QuickStartGuide.pdf
    .pdf
    • http://ibm.biz/LMT_collect_bigfix

    • http://ibm.biz/LMT_collect_disc

    • https://www.ibm.com/docs/en/license-metric-tool

    • https://ibm.biz/LMT-support-forum

    • https://ibm.biz/lmt_bfi_videos

    • https://www.ibm.com/docs/en/license-metric-tool?topic=tool-guides-in-pdf-format

    • http://www.ibm.com/legal/copytrade.shtml

  • autorun.inf
  • install_response.txt
  • licenses/LA_cs
  • licenses/LA_de
  • licenses/LA_el
  • licenses/LA_en
  • licenses/LA_es
  • licenses/LA_fr
  • licenses/LA_hr
  • licenses/LA_hu
  • licenses/LA_in
  • licenses/LA_it
  • licenses/LA_ja
  • licenses/LA_ko
  • licenses/LA_lt
  • licenses/LA_nl
  • licenses/LA_pl
  • licenses/LA_pt
  • licenses/LA_ru
  • licenses/LA_sl
  • licenses/LA_tr
  • licenses/LA_zh
  • licenses/LA_zh_TW
  • licenses/LI_cs
  • licenses/LI_de
  • licenses/LI_el
  • licenses/LI_en
  • licenses/LI_es
  • licenses/LI_fr
  • licenses/LI_hr
  • licenses/LI_hu
  • licenses/LI_in
  • licenses/LI_it
  • licenses/LI_ja
  • licenses/LI_ko
  • licenses/LI_lt
  • licenses/LI_nl
  • licenses/LI_pl
  • licenses/LI_pt
  • licenses/LI_ru
  • licenses/LI_sl
  • licenses/LI_tr
  • licenses/LI_zh
  • licenses/LI_zh_TW
  • licenses/non_ibm_license
  • licenses/notices
  • setup-server-windows-x86_64.bat
    .bat .vbs
  • tools/IBMTCD10.dll
    .dll windows x86

    709f14f8ac152cad26a139c7b3387698


    Headers

    Imports

    Exports

    Sections

  • tools/ServiceUser.exe
    .exe windows x86

    23ea1aba9de991c20018704f5c51645e


    Headers

    Imports

    Sections

  • tools/checkVersion.bat
    .bat .vbs
  • tools/checkVersion.jacl
    .vbs
  • tools/checkVersion.sh
    .sh linux
  • tools/cleanlmtenv.sh
    .sh .ps1 linux
  • tools/createdb.sh
    .sh linux
  • tools/getArch
    .sh linux
  • tools/getId.vbs
    .vbs
  • tools/ibm.com-IBM_Db2_Standard_Edition_VPC_Option-D561HLL.swidtag_
    .xml
  • tools/ibm.com_IBM_License_Metric_Tool_-_Server-9.2.32.0.swidtag_
    .xml
  • tools/killserver.vbs
    .vbs
  • tools/logHelper.sh
    .sh linux
  • tools/msg/help.properties
  • tools/msg/help_cs.properties
  • tools/msg/help_de.properties
  • tools/msg/help_en.properties
  • tools/msg/help_es.properties
  • tools/msg/help_fr.properties
  • tools/msg/help_hr.properties
  • tools/msg/help_hu.properties
  • tools/msg/help_it.properties
  • tools/msg/help_ja.properties
  • tools/msg/help_ko.properties
  • tools/msg/help_nl.properties
  • tools/msg/help_pl.properties
  • tools/msg/help_pt_BR.properties
  • tools/msg/help_sl.properties
  • tools/msg/help_zh_CN.properties
  • tools/msg/help_zh_TW.properties
  • tools/nls_replace
    .sh linux
  • tools/prereq_sizes.txt
  • tools/register_wlp_server.sh
    .sh linux
  • tools/run.bat
  • tools/wlpserver
    .sh linux
  • tools/zipLogs.vbs
    .vbs
  • upgrade_response.txt