General

  • Target

    ITGREL-0233-SU.ZIP

  • Size

    31.0MB

  • MD5

    e663f4ec72393b9ac5e061213d182b44

  • SHA1

    02f135c4dcb8a1d6b8834060543576353e142edb

  • SHA256

    7d90d5fa3722b14c34801f2720ea32d6444fc13a7dd4c788ff8ebe5f3f646a1d

  • SHA512

    b56809b06f1aae80c23083a91d7bef47487cbcaa2956b8ba04875a810399e13a846f0820b7a3c9e621f8d70d03f45601e07b4a42db6e383e4d38d083ad8a50d6

  • SSDEEP

    786432:xl8At9yA+v9hpU6V6tv5HblakNo1L3xjGdm5qasS:1WhpU6VYB7cSMLBCd4IS

Score
8/10

Malware Config

Signatures

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • ITGREL-0233-SU.ZIP
    .zip
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.C1Excel.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.C1Pdf.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.C1Report.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.C1Word.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.Barcode.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.Bitmap.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1Chart.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1Chart3D.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1Command.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1DX.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1Document.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1FlexGrid.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1FlexGrid.ImportExport.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1Input.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1InputPanel.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.C1Report.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.Calendar.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.FlexChart.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.FlexReport.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.FlexViewer.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.ImportServices.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Win.Ribbon.4.8.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/C1.Zip.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/CsvHelper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/999000002_EnvioEmailMCE2.CadITG
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/CMS_Email_Process.CadITG
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/CMS_Email_grant_itg_user.sql
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/CMS_Servico_Email_Instalacao_Cfg_en.docx
    .docx office2007
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_888000001_VSI_Ctbsm01.CadITG
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_888000002_VSI_QlikView.CadITG
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.CIC.COA.001.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.CIC.LNC.001.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.CTL.EXE.PRL.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.MRC.ANC.001.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.MRC.ANC.002.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.MRC.COA.001.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.MRC.COA.002.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.MRC.EXC.001.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_ITG.MRC.LDG.001.CadITG
    .xml .vbs polyglot
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_TesteCtaEMail.CadITG
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_desmarcar_baixas_novo_calculo_ITG.OSC.002.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/Cad033IpmProcesso_marca_allocation_conciliado_ITG.OSC.001.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/CargaArqContabilAprovar.CadITG
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/IPMProcesso_0999000101.CadITG.txt
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/IPMProcesso_0999000102.CadITG.txt
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/IPMProcesso_Email_ITG_CA2.CadITG.txt
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/IPMProcesso_Trunca_Log.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/IPMPadrao/MRC_IncluiCtaAusentePlano.CadITG
    .xml
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Microsoft.Bcl.HashCode.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Microsoft.CodeAnalysis.CSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Microsoft.CodeAnalysis.VisualBasic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Microsoft.CodeAnalysis.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Microsoft.WindowsAPICodePack.Shell.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Microsoft.WindowsAPICodePack.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Oracle.ManagedDataAccess.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Collections.Immutable.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.CommandLine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.IO.FileSystem.AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Reflection.Metadata.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Text.Encodings.Web.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Text.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Templates/ExtISS - Importacao Tarifas Instituicao(Santo Andre).csv
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Templates/ExtISS - Importao de Cdigo de Servicos e Aliquotas(Santo Andre).csv
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Templates/MascaraBacenGeracao4010.xlsx
    .xlsx office2007
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Templates/MascaraBacenGeracao4040.xlsx
    .xlsx office2007
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Templates/Mascara_MRC_BalanceteTCodes.xlsx
    .xlsx office2007
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/Templates/Mascara_MRC_Lancamentos.xlsx
    .xlsx office2007
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/cfg.NETsec.bat
    .bat .vbs
  • ITGREL-0233-SU/ITG_Modulos/itgREL01/itg.MCE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/itg01.SUN.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/itg01.com.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/itg01.win.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/itg02.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/itg02a.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/ITG_Modulos/itgREL01/itgREL01.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections

  • ITGREL-0233-SU/Portugues_itgREL01_Instrucao_Instalacao.docm
    .docm office2007
  • ITGREL-0233-SU/itgREL01_Installation_Instructions.docm
    .docm office2007

    ThisDocument

    NewMacros

  • ITGREL-0233-SU/~$rtugues_itgREL01_Instrucao_Instalacao.docm