Overview

overview

7

Static

static

5

RFQ REF-JT...LY.exe

windows7-x64

7

RFQ REF-JT...LY.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    04102024_1452_04102024_RFQ REF-JTCAJC-QINHP5-TIS-L0009- (AL DHAFRA) AL JABER - SUPPLY.zip

  • Size

    708KB

  • MD5

    cc505e1bc25802d114aca175576ab8f7

  • SHA1

    f603242944b8627cb0bb5945c18b698dede031d2

  • SHA256

    fa3424f6037c9ac7f453112cb80aa67cd3eae4daddca7b0433ab945417849dc1

  • SHA512

    0245f9a6987e7bd5a2ace6bccb5455be96c87bcecd1923ee08b0e9c40c6db4d067b4edf9e3c06485899dfb880825cc43de0c10d72bf93435d3a7e28ebf38953e

  • SSDEEP

    12288:S/w0qK+8TH2F5bribBkOvwvSF8CEiqvWJ0JlOGZH+/o+XyNTjUbLu:6wT8THa5KbBBvEo8XiqvWi3OGMov9b

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 04102024_1452_04102024_RFQ REF-JTCAJC-QINHP5-TIS-L0009- (AL DHAFRA) AL JABER - SUPPLY.zip
    .zip

    Password: infected

  • RFQ REF-JTCAJC-QINHP5-TIS-L0009- (AL DHAFRA) AL JABER - SUPPLY.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections