General

  • Target

    14102024_1408_14102024_SOLICITUD DE OFERTA.tar

  • Size

    1.1MB

  • MD5

    c43fe5a08eae0c9d692185e57a2d09de

  • SHA1

    b50925b59d11e48a4d5c71410118896f59a729ba

  • SHA256

    b693534f253b9727f0d01581b5911a96c80a381f45c9966686174c4728233812

  • SHA512

    755a7c12739b0c563f0ea259961e089d60c3dc4df10b5b995ab78b84236d473d7691b7c83d920fbeaa698d62d1bc9dde97002712e0f203c89a96b486d640f969

  • SSDEEP

    24576:rdsEoDS6xj8nJMKEkgmnOvDJSy3sfVwzmIl/WHnJ4FYk5Y5:P/QaJMtkg79vsfmzmI5EnJ2i

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 14102024_1408_14102024_SOLICITUD DE OFERTA.tar
    .rar

    Password: infected

  • SOLICITUD DE OFERTA.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    e990dd07e89d04c53e337ab9b3f5e0cc


    Headers

    Imports

    Sections

  • mnstring/Bygningselementer19.dok
  • mnstring/Helldiver.Jun
  • mnstring/countersway.Udm
    .ps1
  • mnstring/frihedsgodes.sto
  • mnstring/jaevndoegn.ski
  • mnstring/prevailingness.txt