General

  • Target

    QTRTD-AddIn-packed.xll

  • Size

    313KB

  • MD5

    012481404c1704c75ecc181372b13525

  • SHA1

    ce8ff49e97b240e4a589a169b25fe8bf6a94298e

  • SHA256

    f74099fab5d70827565acca02eaca5182bf5921a6980cf82c8d7841ce70a5c6e

  • SHA512

    2f6f2b146f674fe51170a4a3f13860d5fab0c7d17752899589d677976498efcf187515624ca2cc8e0deafef1ca3f30f6a4afcdb124ed46d9068d99d4b80e4f4f

  • SSDEEP

    6144:XUTqMrFMsURpHRj6o72Z1+hwGPVgfOHTi+4VT7NHLITImKDXxv2oaVB6ZK:X2qMrFMsUR76U2PGPVPG+a7bxuoayZK

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QTRTD-AddIn-packed.xll
    .zip

    Password: Sentinel1!

  • Device/HarddiskVolume3/Users/dsmith2/AppData/Local/MCApp/app-3.6.12/resources/RTDAddonInstaller-win32-x64/resources/addons/QTRTD-AddIn-packed.xll
    .xll windows:6 windows x86 arch:x86

    0d1c2e8773adbfbc64d57aab36998066


    Headers

    Imports

    Exports

    Sections

  • manifest.json