General

  • Target

    12062024_1143_11062024_Request for quotation # 532465.pdf.z

  • Size

    10KB

  • MD5

    c9955bb5b1655011b4ff97131d7ccc3c

  • SHA1

    22d2dc2db91dce4e9158a034c01043cabfc783b4

  • SHA256

    7f34f49c31e075ddecd7c19e45cd2364fbc29fbb561d7e85db11f1e08913ed69

  • SHA512

    26efc73a3f994a2da65866d2297cbdaf17aae7c08c5a8e2be11933ade731115fbfb6ed97e59c56fe954637d0d19da92fdf438e66774dc8825dde99c6278ad803

  • SSDEEP

    192:06J+4HnUjtE/Gj5kHYJG2EoHAwPSaixnMO/DyrRpAFi6MCZuCUXOJEE:3o0/058YJflZPSxxP/GF6TuCetE

Score
10/10

Malware Config

Extracted

Family

purecrypter

C2

http://161.129.66.18/Yxnbi.wav

Signatures

  • Purecrypter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 12062024_1143_11062024_Request for quotation # 532465.pdf.z
    .rar

    Password: infected

  • Request for quotation # 532465.pdf........................exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections