Overview

overview

10

Static

static

3

MACRO-DFIR-RETO.xls

windows10-2004-x64

10

iroto.dll

windows10-2004-x64

3

iroto1.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    MACROS-RETO-DFIR.zip

  • Size

    106KB

  • MD5

    d1475cd5e8a46d9c1116dfe65d9f5e39

  • SHA1

    c01172b22fab64c6d387af9b61d513af7e8e33a7

  • SHA256

    33180ab9b8611dad2a48eb4dfcf9b0da28ba02381dbbe23fe67551063d77f94a

  • SHA512

    416a8b0544d03fc1ec4c7397be9af746c1a835e76d4b4fff491fdc21a284a7dbf43561f1631f6f0b7d822eb3f37d33764235a108c042e176a47b63455b7f046d

  • SSDEEP

    1536:Tvd/zEPlZjXD4iQG6cKmQvXe6qt5CcPZq3MIJXsIOkDY4HMGVo/n/1I:5CNDrpKbeDt5rZq8IJX3Ok04H/O/W

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • MACROS-RETO-DFIR.zip
    .zip

    Password: qm

  • MACRO-DFIR-RETO.xls
    .xls windows office2003
  • iroto.dll
    .dll windows:4 windows x86 arch:x86

    Password: qm


    Headers

    Sections

  • iroto1.dll
    .dll windows:4 windows x86 arch:x86

    Password: qm


    Headers

    Sections