General

  • Target

    15916138746.zip

  • Size

    4.4MB

  • MD5

    18f2ed5af57af0027d85c16b2f08d15b

  • SHA1

    14ac35920956df02be37fc03201c69ed2fba93fe

  • SHA256

    ce7e375700c2b4ae6a78273e2ad56fdad37d927f3917fe9914c642f4d20cf613

  • SHA512

    452342dd2ba6ef44fe69ef2cbea1db5e8d06a65449190c37a70f59c4e93567c1e89cd371f7dd6bff5adbaa8e51477cf77bdffd88031325feef9b19935b7d6b57

  • SSDEEP

    98304:bZgWtCS2IXtAXRl+Uoc9QofVyt6EX1HC5KXUWV6fsqBmyvbIYJ:bZgEtdAXRP9QMVrg11XUmO1tvbj

Score
4/10

Malware Config

Signatures

  • HTTP links in PDF interactive object 2 IoCs

    Detects HTTP links in interactive objects within PDF files.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 15916138746.zip
    .zip

    Password: infected

  • c42b1964954424949bfd9233f5539c790fa1447df29f5a69b5d5ace66c8c6853
    .zip
  • MV_IPTel/bin/MV_IPTel.ini
  • MV_IPTel/bin/MV_IPTel_Services.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • MV_IPTel/bin/MV_Mgr.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • MV_IPTel/bin/MV_Pwd_Generator.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • MV_IPTel/bin/MV_Scan_Console.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • MV_IPTel/bin/libsnmp.dll
    .dll windows:4 windows x86 arch:x86

    28693ce1b1268b3ca1182b72823b05fe


    Headers

    Imports

    Exports

    Sections

  • MV_IPTel/bin/logo_avaya.gif
    .gif
  • MV_IPTel/bin/mvsnmpget.exe
    .exe windows:4 windows x86 arch:x86

    279e94b2d184cc4312172e880f2ec8f6


    Headers

    Imports

    Sections

  • MV_IPTel/bin/snmperrors.txt
  • MV_IPTel/data/Backup/Fri_FTParchive.zip
    .zip
  • Program Files (x86)/Avaya/MV_IPTel/data/FTPData/FTP_Check.txt
    .html
  • MV_IPTel/data/Backup/Fri_HTTPSarchive.zip
    .zip
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/46xxsettings.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/HTTPS_Check.txt
    .html
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/HTTP_Check.txt
    .html
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/J100Supgrade.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/av_prca_pem_2033.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/signatures/RootSA256.txt
  • MV_IPTel/data/Backup/Fri_HTTParchive.zip
    .zip
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/46xxsettings.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/HTTP_Check.txt
    .html
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/J100Supgrade.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/av_prca_pem_2033.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/signatures/RootSA256.txt
  • MV_IPTel/data/Backup/Mon_FTParchive.zip
    .zip
  • Program Files (x86)/Avaya/MV_IPTel/data/FTPData/FTP_Check.txt
    .html
  • MV_IPTel/data/Backup/Mon_HTTPSarchive.zip
    .zip
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/46xxsettings.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/EULA.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/HTTPS_Check.txt
    .html
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/K1xxBSupgrade.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPSData/signatures/RootSA256.txt
  • MV_IPTel/data/Backup/Mon_HTTParchive.zip
    .zip
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/46xxsettings.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/EULA.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/HTTP_Check.txt
    .html
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/K1xxBSupgrade.txt
  • Program Files (x86)/Avaya/MV_IPTel/data/HTTPData/signatures/RootSA256.txt
  • MV_IPTel/data/Backup/Thu_FTParchive.zip
    .zip
  • Program Files (x86)/Avaya/MV_IPTel/data/FTPData/FTP_Check.txt
    .html
  • MV_IPTel/data/Backup/Thu_HTTPSarchive.zip
    .zip
  • MV_IPTel/data/Backup/Thu_HTTParchive.zip
    .zip
  • MV_IPTel/data/Backup/Tue_FTParchive.zip
    .zip
  • MV_IPTel/data/Backup/Tue_HTTPSarchive.zip
    .zip
  • MV_IPTel/data/Backup/Tue_HTTParchive.zip
    .zip
  • MV_IPTel/data/Backup/Wed_FTParchive.zip
    .zip
  • MV_IPTel/data/Backup/Wed_HTTPSarchive.zip
    .zip
  • MV_IPTel/data/Backup/Wed_HTTParchive.zip
    .zip
  • MV_IPTel/data/FTPdata/FTP_Check.txt
    .html
  • MV_IPTel/data/FTPdata/Fri_FTParchive.zip
    .zip
  • MV_IPTel/data/FTPdata/Thu_FTParchive.zip
    .zip
  • MV_IPTel/data/FTPdata/Tue_FTParchive.zip
    .zip
  • MV_IPTel/data/FTPdata/Wed_FTParchive.zip
    .zip
  • MV_IPTel/data/Scan/MV_Scan.param
  • MV_IPTel/docs/Avaya_License.rtf
    .rtf
  • MV_IPTel/docs/MV_IPTel_Quick_Start.pdf
    .pdf
  • MV_IPTel/docs/MV_IPTel_Reference.pdf
    .pdf
  • MV_IPTel/docs/Net-SNMP-license.txt
  • MV_IPTel/docs/Readme.rtf
    .rtf
  • MV_IPTel/log/HTTP-files.log
  • MV_IPTel/log/MV_IPTel.boot.log
  • MV_IPTel/log/MV_IPTel.log
  • MV_IPTel/log/iptel_logarchive.zip
    .zip
  • MV_IPTel/templates/FTP_Check.txt
    .html
  • MV_IPTel/templates/HTTPS_Check.txt
    .html
  • MV_IPTel/templates/HTTP_Check.txt
    .html
  • MV_IPTel/templates/TFTP_Check.txt
    .html
  • MV_IPTel/templates/test.html
    .html
  • MV_IPTel/templates/testhttps.html
    .html