General

  • Target

    08052024_1408_08052024_Payment swift copy INV 00932024.tar

  • Size

    581KB

  • MD5

    67b64c1b62d6252296f43e812426e670

  • SHA1

    7fff1b340015863d777d29475212d751143ddf2a

  • SHA256

    25bc774e49f455f466028409108eca4e600dfdbfa5db48c575385400595da427

  • SHA512

    f71afff2809bab20c8a26e6141a3e0b29d23e53070e3b60b440c38bbaede43611e93dd03aa7f983cf04a4dcce807ddc72ad6c4741597a63d70760280ba45dba2

  • SSDEEP

    12288:NnS5bbcyqN+TykF72y5X/4RICHuDblGzUUPGBo85VaVBYw1Iq1s:jyqQdX/4RDHeZGooVBtvW

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08052024_1408_08052024_Payment swift copy INV 00932024.tar
    .zip

    Password: infected

  • Payment swift copy INV 00932024.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    21634e8b08d82f0c85fdef261dcc3085


    Headers

    Imports

    Sections