General

  • Target

    QTRTD-AddIn-packed.xll

  • Size

    313KB

  • MD5

    be9c23457f5cc5189e7b5ae9dd073a90

  • SHA1

    be52421ec684574eaf38912df327db025f9c5a40

  • SHA256

    689de82809332b208a8012df9cfd2674b8b593f29428c7b4a7a2e611397cf29a

  • SHA512

    ba0c89650f328da2fb879346abb5408ade3e12ac8ffec95b01256d4440bc0dbf16267c724bf55dbb11fab056de4c075046d3bcaeb70e8d4748b277b9ae72ed23

  • SSDEEP

    6144:1MdwC7b7BUWHeftir+Kef8QbQemIsI7tEB5lVhvJ3K1+clB74wO:1MZ7XZeFfKef7cEsWCBhJ3k+Jh

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QTRTD-AddIn-packed.xll
    .zip

    Password: Sentinel1!

  • Device/HarddiskVolume3/Users/tsebus/AppData/Local/MCApp/app-3.6.12/resources/RTDAddonInstaller-win32-x64/resources/addons/QTRTD-AddIn-packed.xll
    .xll windows:6 windows x86 arch:x86

    0d1c2e8773adbfbc64d57aab36998066


    Headers

    Imports

    Exports

    Sections

  • manifest.json