General

  • Target

    f864a12d773b7f8ffd0c584fc0c4511a34c74328a426dc4a1aa69756d1366c75.zip

  • Size

    707KB

  • MD5

    5aed4dd4b1c34eba190e4325e751cdf5

  • SHA1

    ec1538c6655f33232068451b46e6b83c9f7432bd

  • SHA256

    f864a12d773b7f8ffd0c584fc0c4511a34c74328a426dc4a1aa69756d1366c75

  • SHA512

    b92eefe60a9bbaa45436e179ae5489527347b50bd3accb3539a280648c22cdcc3b62184ee326b3ce0d6e581560c27c67c21c54528332ac3a81913a750aea42cf

  • SSDEEP

    12288:eP3CGG0LCW79n3MgAlAXE0cTf5ACQvfCnRgRKaGECBsCDtiQmXfp/GW2M9U+i+P:eO0LjMgAloErqnvfW2RKMQCR/PNi+P

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f864a12d773b7f8ffd0c584fc0c4511a34c74328a426dc4a1aa69756d1366c75.zip
    .zip
  • RFQ#TLPO15_FEB24_Al_Adrak_Trading_Contracting_LLC.exe
    .exe windows:4 windows x86 arch:x86

    9dda1a1d1f8a1d13ae0297b47046b26e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • Justness/Viuva/Synergists.gld
  • Justness/Viuva/Ultraconservatism.dat
  • Lufttom/Bartsia/Betonrkners190/Prefecture/rdehavet.whi
  • Lufttom/Bartsia/Betonrkners190/Prefecture/soarability.fod
  • Lufttom/Bartsia/Betonrkners190/Prefecture/superviser.txt
  • Negligere/Calamariaceae/Rushingness/Uncircumscribable.mar
  • Ombygningsarbejdets/Pantomimiske/Exocrine.chi
  • Referensgruppen.Ska
  • Rekursinstansers245/Tropismer/Microseismometry124/Snowman/kornelia.pla
  • Sixtyeight/uncivilizeds/Misordination/Baadevrfter/isterning.fem
  • Skomagernes/Hermandad/dissunder/Anfoeres198.gre
  • Unquality/Maallses/Renovationsordninger/nationalbankdirektrerne/alpinisms.hea
  • Unsuicidally/vagttjenestes/Ritmesteren/Rewhirl.fuc
  • arbejdsroen/Minefarers/moonfishes.uns