Overview

overview

10

Static

static

3

Booking Fo...sx.exe

windows7-x64

10

Booking Fo...sx.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04072024_1528_03072024_Booking Form PIF.xlsx.7z

  • Size

    811KB

  • MD5

    5181ac6d443bc937d26b19fc59c14ed3

  • SHA1

    a229d7c751b5fd3c6b43a32140a2c03e46c102ee

  • SHA256

    476a1cec4967c2ad6e2271e8903cb3b7be51c55d22127b1b2778405c55d7be58

  • SHA512

    b7034973f6a1eb0fc861f1140b60ffe474a8a1478d764e2eaa8c1ef87298e41df36ce1768a4831d18654d470460039cd07813eb7aa328eac3270eed2cd5cf505

  • SSDEEP

    24576:4OMXnzzPZE7ty/QJpphb5UslbDV9H2unO:4VXnzzRityYL3b5UEbx9H2J

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04072024_1528_03072024_Booking Form PIF.xlsx.7z
    .7z

    Password: infected

  • Booking Form PIF.xlsx.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections