General

  • Target

    QTRTD-AddIn-packed.xll

  • Size

    313KB

  • MD5

    55dc6445fdba9f97d88f97e8da18230c

  • SHA1

    c268dc848abcbb1b63233ec0e2aca5440eb7f2af

  • SHA256

    e7dc1dc2ab4853e8ff36fc6b8254d88a7010125a728651c142d0238bfcee9812

  • SHA512

    40053dd282e2be7b7f3101cc30778eacf5794f49a97a9f7fa52980b506e074a01592800bc130a4d92e3a33d4fc5475f9aff800668917ffa24ee5f4fd9fc91dcb

  • SSDEEP

    6144:+UTqMrFMsURpHRj6o72Z1+hwGPVgfOHTi+4VT7NHLITImKDXxv2oaVB6K:+2qMrFMsUR76U2PGPVPG+a7bxuoayK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QTRTD-AddIn-packed.xll
    .zip

    Password: Sentinel1!

  • Device/HarddiskVolume3/Users/tsebus/AppData/Local/MCApp/app-3.6.11/resources/RTDAddonInstaller-win32-x64/resources/addons/QTRTD-AddIn-packed.xll
    .xll windows:6 windows x86 arch:x86

    0d1c2e8773adbfbc64d57aab36998066


    Headers

    Imports

    Exports

    Sections

  • manifest.json