General

  • Target

    QTRTD-AddIn-packed.xll

  • Size

    313KB

  • MD5

    c45b051588cd935e5a98c5365e045a1a

  • SHA1

    98cdb6f127cfdb4662fa2c2dcf88067427255f05

  • SHA256

    d0a91574ddfa342949119d47a430affbebcb9d1a43a301f6d8e1806b7ff9bfc9

  • SHA512

    4b424245d46bdb19fdf926488336bbcfa86ff9da3f06df41249158b2a6e4da36c0c7ad794e8ab8c01d8c655967c85e616562e34087f23e3290db6f09d4f6b920

  • SSDEEP

    6144:3UTqMrFMsURpHRj6o72Z1+hwGPVgfOHTi+4VT7NHLITImKDXxv2oaVB6v:32qMrFMsUR76U2PGPVPG+a7bxuoayv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QTRTD-AddIn-packed.xll
    .zip

    Password: Sentinel1!

  • Device/HarddiskVolume3/Users/tsebus/AppData/Local/MCApp/app-3.6.12/resources/RTDAddonInstaller-win32-x64/resources/addons/QTRTD-AddIn-packed.xll
    .xll windows:6 windows x86 arch:x86

    0d1c2e8773adbfbc64d57aab36998066


    Headers

    Imports

    Exports

    Sections

  • manifest.json