General

  • Target

    New Compressed (zipped) Folder.zip

  • Size

    5.0MB

  • MD5

    056173bbfc23626cf946ec103e2fda2c

  • SHA1

    b1bcaf3dbd8c43d0dd15ec5d9034843dfd4851f5

  • SHA256

    4b22dbf9788f52b0739e6f12f220e19ec195b44ff04f448f85938f4e4b44e284

  • SHA512

    af63fcb09995e14f955cec46d00d9495b476d0e040c4ce989c12d45f41656047c30d9f45f52d379b0783a2c39df547ca896340fe5f12fb6867a686aaa3a81090

  • SSDEEP

    98304:QmPP7ACkJfuD6mMUNQbTsjZ0tgUE4nh5b1I62U9pOmia9+RHy0D3s6JuXYzOxjPm:QmPcCylzUObYjZ06U95bn90miaK7zs6R

Score
3/10

Malware Config

Signatures

  • One or more HTTP URLs in PDF identified

    Detects presence of HTTP links in PDF files.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • New Compressed (zipped) Folder.zip
    .zip
  • 0bddc6655ba739d631907c6b5063348789dd75356258f5aa846907342e77bec4.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 1628647c9d28f39641d4d0be0192d09e5881164ef199f309f49488b0398460f3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 3c18e64435871f8e9fd9c1d379f6cb76f4a5e8c5734386ff9ae10e35fb666112.url
  • 522f6cd72ee97eb4d00c2b3ef4c93c4f3396f3c6c8f85dd58655a0edcd0b865d.url
  • 7dfcedc537a858be0d598ef2f327d4fa2aeb3f4191a7f724fcad85a1c894ea53.url
  • Amministrazione.url
  • aa37c9834962ef744c594c5dc3c3c29f2636214a883539517ced0543743da548.pdf
    .pdf
    • https://qu.ax/kVDT.zipAll

  • b34314e52215dca5420839e5d93787567f3e6df391a058f77fbbeb50cc546a87.unknown
    .png
  • cf6d2322e1a9ea3d1b05171942922d5627b202d15ed33b9673ace501ebb47f92.exe
    .dll windows:6 windows x64 arch:x64

    e6a5883a44ec58ac0a9e938d3f0cc874


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d7611498ac3f820d16556e4743c1c2e028388d90608e610c1d06e838ff1114cf.unknown
    .png
  • da37c1a83b8ccf9ca09c04b75406f57395928314594520fcc2696e493ab27db9.xlsx
    .xlsx office2007
  • dc83396015773f0d7abb3f7e7653cf048d44d267dc1332ddef21bc1ab302b6f7.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • e262818591a54510401fead17928d0da8df02a29150ee319e86821a447505641.url
  • e579ef01ba2f52a618ab1448543ea8646ea710cf168c64aff70f68e1c89f6cad.exe
    .exe windows:4 windows x86 arch:x86

    b76363e9cb88bf9390860da8e50999d2


    Headers

    Imports

    Sections

  • f6984e999b87eda435d684b71e81e6750dc885fd9ba3f59e1e20fefe8a55cae4.unknown
    .png
  • proforma invoice.pdf
    .pdf
    • https://qu.ax/kVDT.zipAll