C0R544715T200194225.eml
- SHA256 0554d5c6cd5e56b0b06c4bce0ec5923a0faaab1c6e2ce7b93ee72ea4474bfd9e
Extracted URLs
-
file https://www.rbinternational.com
Static task
static1
Behavioral task
behavioral1
Sample
Raiffeisen Bank International AG _Zahlungshinweis.pdf.exe
Resource
win7-20240704-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Raiffeisen Bank International AG _Zahlungshinweis.pdf.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target C0R544715T200194225.eml
- Size 1.3MB
- Sample240708-pzhqaasbnb
- SHA256 0554d5c6cd5e56b0b06c4bce0ec5923a0faaab1c6e2ce7b93ee72ea4474bfd9e
- MD5 6eff1b5b51d5738eec4e613a7a4da2bd
- SHA1 6af712985db1f60f59ec7938f607cd88c3512c64
- SHA512 086999e6f25b87cdfc45fdc9550b6286af9b08819d438f9d55898aabb7438432e335bb6595598c14695bcd9eaf414501cf3d153c4cdfb8e1f51c2e1c3865e1a8
- SSDEEP 24576:PV5THMf5uTu3cGsTb94WoYnPRrNQ5SZ/JXGz3OuGfUniRGwI:PYiu4x4V/uo
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
C0R544715T200194225.eml.eml 1.3MB
-
Raiffeisen Bank International AG _Zahlungshinweis.pdf.tar.tar 955KB
-
Raiffeisen Bank International AG _Zahlungshinweis.pdf.bat.exe 953KB
-
at.png.png 5KB
-
email-html-1.txt.html 2KB
Raiffeisen Bank International AG _Zahlungshinweis.pdf.tar
- SHA256 4d3ac2a6a50ee550fd1c47a2058cc66a567f4ab05348f352cebbaddca96a946a
- MD5 bdf508490dbcead555b0fd69e3510aaa
- SHA1 7175e660977fa9b7270caec266d823f98c98923e
- SHA512 79da43cf137c09689b29f06e2e87ceac52716e834f51dd5c46ba3b0a5eb152f9b5fbaef2ce88c0938473d281113f0ccd40a28b29b66bde1b7878557b6a2a4b6c
- SSDEEP 24576:4W5SDDvD1/OGCZMcGPhjGllfkIY1nrtzqMwr6K:4HDD7UZMbPVsl8IY/qMxK
- MD5 SHA1 SHA512 SSDEEP
Raiffeisen Bank International AG _Zahlungshinweis.pdf.bat
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 59558d5bc10450ec63904f60f61b13f2e2feba2160c02bdd50eba25cd1b3b355
- MD5 1ea48c61b1d13c6e0721aeb7f18e214a
- SHA1 7ee631c0095ea585bd4dd00f89cf0a46ba0ff42d
- SHA512 a618dd73ce3350d266e9413e0f495bc85e906e004b497ccea1e3305269d65cfd685b973480e058842961b90bef331eda8b3c2c2043b97e0adf7d51015b86c265
- SSDEEP 24576:VW5SDDvD1/OGCZMcGPhjGllfkIY1nrtzqMwr6KO:VHDD7UZMbPVsl8IY/qMxKO
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8e:59:3b:e1:f8:c8:15:23:34:5d:ef:62:39:c5:63:dd:47:4d:d1:d3:22:88:81:d5:bc:af:7d:bc:8d:45:dd:2f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Chains
Mar 16, 2019
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
PE Signature issue
Digest
ac:12:aa:63:90:e4:57:be:8e:dd:73:99:d1:23:18:e8:d8:5c:a7:94
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Chains
Mar 16, 2019
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Serial Number
7c:11:18:cb:ba:dc:95:da:37:52:c4:6e:47:a2:74:38
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 13, 2018 - Nov 8, 2021
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 19, 2010 - Jan 18, 2038
Subject
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 9, 2013 - May 8, 2028
Subject
CN=Simon Tatham,O=Simon Tatham,L=Cambridge,ST=Cambridgeshire,C=GB
Serial Number
7c:11:18:cb:ba:dc:95:da:37:52:c4:6e:47:a2:74:38
Issuer
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 13, 2018 - Nov 8, 2021
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
0
Major OS version
4
Entry point
967674
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
nfPe.pdb
mscoree
_CorExeMain
Name
.text
Size
937KB
Virtual Size
937KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
at.png
- SHA256 561b0111d04d01f69b9a56e4a36da821674d460d9aec0c293b632eed7adb6f49
- MD5 f92cc5b25e42d76008114413008cb0ce
- SHA1 95c472ad82541a277cd7af632c29affbc4a230a3
- SHA512 5b4b3411a512529a6c39e266588a5cd4377c1cb9baeff040d85a9d7d9bd0b8cc83bb7d16bb73ef13b08a98b0f003dbd1892a1b47ecc37bc6c1b6eb069cf806cc
- SSDEEP 96:soJqKeAG2Io7TPEXojz2olRnGO/o4HK7plzYUQAt53Z4IMf+ZKBYE:soo/AzdUo/lRGOQ4q7plzYUQAt5/mwE
- MD5 SHA1 SHA512 SSDEEP
email-html-1.txt
- SHA256 6484db8c275474d1adda64aa0aca75f8dc44ecded83decebcef01a1a4b8cb18b
- MD5 0bf7756a48e40a31f8a220bac9c409f5
- SHA1 18e137559014ee17eedc7cd1df1b6d2ebcf4e086
- SHA512 216574b20b95e5c4c213b9d39550df42a3405bcc71abd953f981cb8b8eebfb021b9a374097722d6c49ca7708971d7f16a2c7bfa9faaa6a2d1a16fafb9a95286b
- MD5 SHA1 SHA512