General

  • Target

    36e3123a-0b72-4b18-8f05-ce337b6c70f0.zip

  • Size

    88KB

  • MD5

    a2e4ef60282bbb50620b27c757a87787

  • SHA1

    66681ccbb8bcf411da6c44528335933aca3ca756

  • SHA256

    058b1d131dd107db17b576eceef7a40c5dec5e01f8d32093f5c30220ef3d7a3e

  • SHA512

    b16721f8be159719e379b48dce4ae3c54ef77207265698120eb64c3735d45bd5f8880afb39a4d01e2189a653bc7665e4d4434eefef2ae157a4dc98d9b4932ae0

  • SSDEEP

    1536:BBPPy6wl+2anrFxdpIvcyUvPtEGCQdfQ9Ozbu0zKoy7c5sjOYuvioe6cLtA1V4:zi6wfaJxYvi2mD2gKnThoe6ItaV4

Score
6/10

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

Files

  • 36e3123a-0b72-4b18-8f05-ce337b6c70f0.zip
    .zip

    Password: infected

  • ProgramData/McAfee/QuarMeta/36e3123a-0b72-4b18-8f05-ce337b6c70f0
    .xml
  • Users/jirice/AppData/Local/Microsoft/Windows/INetCache/Content.Outlook/GXPB6I9F/Final Payment.pdf
    .pdf