General

  • Target

    Fwd_ Cotización 22_08_2024-password(hP4lq2TB).zip

  • Size

    1.2MB

  • MD5

    4dbae34343c57a3f3e0582e669186bbd

  • SHA1

    b4135ee9362aadd7da665bd6ca74d9764f7130f5

  • SHA256

    4ec405f0cc865af5eb681650b0e6710ebd5c13a08582841854c1f8939730028f

  • SHA512

    f928cebaf1ea309e77cb89f7cb52ff635de093ac095df9a7f1fd9d2351754b42541db693a8ee9d9433777ce4ae0f3e1d091b4a42832446c1cc5fd835dfb81c11

  • SSDEEP

    24576:X8ZPFbPNKjMOkQJ6Wekj3MiaUKZSlPBUux9LeyyceUPd:MUjMfENZfKZ6Pl9LpPd

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Fwd_ Cotización 22_08_2024-password(hP4lq2TB).zip
    .zip

    Password: hP4lq2TB

  • a58cb4c9d67405d377695c9e78451426d8aea3d30a18eb3944a3e0e887971c64.eml
    .eml

    Password: hP4lq2TB

    • http:/www.ncsjaguar.com.mx/

    • https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient

  • Cotización 22_08_2024.uue
    .rar

    Password: hP4lq2TB

  • Cotización 22_08_2024.exe
    .exe windows:5 windows x86 arch:x86

    Password: hP4lq2TB


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • email-html-2.txt
    .html
  • email-plain-1.txt
  • image004.png
    .png

    Password: hP4lq2TB

  • image005.png
    .png

    Password: hP4lq2TB