30052024_1416_26052024_REQUEST FOR QUOTATION[.]rar

General

Target
30052024_1416_26052024_REQUEST FOR QUOTATION.rar
Size 646KB
Sample240530-rlkc3acd96
SHA256 d0440d70f0a7854925473a75ebeca43af5da38c787346d04bfafe8e2f94b4177
MD5 37e85b67f0cbfd8d10ee7afc5076e381
SHA1 482b5733230afe595b068f9bc7edbd2cf463134a
SHA512 81464cd309ee68b6dbee92189019fa828aea24490221d41fa56fbc2e0a8c47b9a02ec2f9bebf588d76b81cd9ba2397c2efb1ce5e6928c98a6525d6c6188d6947
SSDEEP 12288:Mv9K7LoAnUxFw/yS667YEIJxNeEHg15I9bkSsLP36UmfhvDM49s+rXiRSjWoJXfq:m9XjSxqxrcibRAPKUap9rpioBfkqwf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/REMITTANCE SLIP.exe

File Explorer

30052024_1416_26052024_REQUEST FOR QUOTATION.rar

.rar 646KB
REMITTANCE SLIP.exe

.exe 676KB

30052024_1416_26052024_REQUEST FOR QUOTATION.rar

SHA256 d0440d70f0a7854925473a75ebeca43af5da38c787346d04bfafe8e2f94b4177
MD5 37e85b67f0cbfd8d10ee7afc5076e381
SHA1 482b5733230afe595b068f9bc7edbd2cf463134a
SHA512 81464cd309ee68b6dbee92189019fa828aea24490221d41fa56fbc2e0a8c47b9a02ec2f9bebf588d76b81cd9ba2397c2efb1ce5e6928c98a6525d6c6188d6947
SSDEEP 12288:Mv9K7LoAnUxFw/yS667YEIJxNeEHg15I9bkSsLP36UmfhvDM49s+rXiRSjWoJXfq:m9XjSxqxrcibRAPKUap9rpioBfkqwf
MD5 SHA1 SHA512 SSDEEP

Password

infected

REMITTANCE SLIP.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f127dc307886133e0cbc728a9ed422078985f48b35784c36634e521dca353b68
MD5 1709dac141a4acc1a54a56a7de3efc76
SHA1 cb8837ba074c2981375f97e535636724b6bb154a
SHA512 a7637b2cf842e2f5a7d28b42497fef03d3266cadb592f9402a0fab71bddd8dc3208fa275ddb8e29238acebcbcedc99a7db84391ff552d922813a8f6fdfbfffae
SSDEEP 12288:vyuDrYCFd6xkWBTXpdr8vKjIlp7wXmFNc+R+siVeLjzoGmjGaT6wXRLuYwyT:vf81xrzphgKiEGI1Kzo5r3
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

692090

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

30052024_1416_26052024_REQUEST FOR QUOTATION.rar

REMITTANCE SLIP.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

30052024_1416_26052024_REQUEST FOR QUOTATION.rar

REMITTANCE SLIP.exe

mscoree

dotnet