RFQ# QUOTATION _ PO-20260602-7701663 __ E2S A105N - PROCUREMENT-password(bCVCn4xq)[.]zip

resource
unpack003/QUOTATION_#PO-20260602-7701663 E2S A105N.pdf(783KB).exe

RFQ# QUOTATION _ PO-20260602-7701663 __ E2S A105N - PROCUREMENT-password(bCVCn4xq).zip

SHA256 817ca49cd7df9575bc33712fa71fa6d0d2b32050f5f04d17c7ae042c3029c366
MD5 1dfe648b5730d54b9b2d5c72de8bd735
SHA1 e211471763aa83d3b0e5e5ff14e4fa7926a32f0a
SHA512 fb30f555083c9f2da453a56d681c5025ee644564501c010c624d5debc2721f3a8eece569a67c8bdb7f6e247c93c764edc02ce001f400062b96931d5f1098d99b
SSDEEP 49152:g6fj3IYiEeyS0eyw8JHNQhZJnsTbfa2fVUO:g6fjyyjw8JHNQ3pAbfa29UO
TLSH
T18E7533D3C1B5D53764A6C220B72FE7F26F83C5B39189CFAA38CE21C668D8E2DA554144
MD5 SHA1 SHA512 SSDEEP TLSH

Password

bCVCn4xq

7fc4c4db0f830e36de93cb73cf0f651b9589343acb447a0942310eaf689a2c55.eml

SHA256 37dd4a5e0d88605fdde2f04643e2ce44ce5fa54c7f02c20a8ce9501be244a89a
MD5 3cb0f2bb00860fd865d923b35fe8795f
SHA1 1df6dc18c0168bda4d283f95eec3862f1f78aaca
SHA512 0a659a178a1c643012a93197e2bda5611c7e0c577c59cdc9a4bf58ba4c1298248d401af875db51a1cd778686297a60f07ca61984ac90b0890d1e1424513af563
SSDEEP 24576:SAAx2sDQQccMdwxByE2fqO47DZSSyz6NuV0QZI2prbAu+SP6BvKXc/D4:C1Lr/zEB6O0iI2pong6pS8U
TLSH
T1CE752254D91E0A260D3298B3F5777FC225854B83179B4BA233B487DB39F98780B427B6
MD5 SHA1 SHA512 SSDEEP TLSH

Password

bCVCn4xq

Email Headers

From

[email protected]

In-Reply-To

[email protected]

Date

Tue, 02 Jun 2026 15:31:05 +0200

Subject

RFQ# QUOTATION _ PO-20260602-7701663 // E2S A105N - PROCUREMENT

Content-Type

multipart/mixed; boundary="=_e3334cf4d3678017b25ecd18a8312fa8"

Received

from mail.teplores.com (unknown [185.242.3.167]) by inpre01.tmes.trendmicro.com (Trend Micro Email Security) with ESMTPS id 9DDB6100032C8 for <[email protected]>; Tue, 02 Jun 2026 14:07:46 +0000 (UTC)

from teplores.com (localhost [127.0.0.1]) by mail.teplores.com (Postfix) with ESMTPA id 79288C191A; Tue, 2 Jun 2026 14:31:05 +0100 (BST)

Message-Id

<[email protected]>

Extracted URLs

file http://www.powermatic.com/

QUOTATION_#PO-20260602-7701663 E2S A105N.pdf(783KB).lha

SHA256 26e8e393e4f80f4c1e0aa7d8189dfef9e8ea7efbf8176d73aa3262d25a4f5c00
MD5 6f456ba92fef84cd7d6bf692861429e7
SHA1 f997fe70c625ddad9675fac7211b21e5285a81f6
SHA512 4b0e12cbb0cf4078280870a3f9ed780ceaa1a2dead433c940fd32a85c19bc2bb0bf6295936b31f1c047db4291d4923d60997df5749da00171195d73ae622392a
SSDEEP 24576:vbh3OGMNWtSgQ9s82lo0weTAUJh1oYYbGWh3O8Sn+H3wIAwgx:vbUGMND3W82lMF0YKw3UiwIAPx
TLSH
T1C335334979BCA8ADA67A972381059F0F098B4447837273E6D2F62371C732C8D36AD15F
MD5 SHA1 SHA512 SSDEEP TLSH

Password

bCVCn4xq

QUOTATION_#PO-20260602-7701663 E2S A105N.pdf(783KB).exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8ac1b7a926bb396cee28bc1fa36f91bf7687c19be5a9a304451efb16a06ce3dd
MD5 2db88307df49ac83295d7ff1f5d73155
SHA1 fe0324ef14be2780ac4779ce4bac80bdb35b2fb0
SHA512 26e5dba220ff09208416723662baab725a387dd9a9d20e692d47f8bbed45c7dc392a821a6b75030c43b130ee7cf2e63ceb2ae61e278ef37fdb2c91cccab44be2
SSDEEP 24576:DqGgNaxAgQ9iSYlQgaef2UJl1ooYBGIn3OOIdMJlwuAs:DqGgNR3gSYl81CYQa3iowuA
TLSH
T11D351249B6A54F01D28C19B1C097453887D2AA4A637BF39E3FB412F96D423B8DD4D3CA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

bCVCn4xq

Minor OS version

0

Major OS version

4

Entry point

1153054

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

br.png

SHA256 129128b93a2e2bcd11e999d676318c4a11ee3aabee2a479176b1279ef9864b42
MD5 29a10d0f109319982323a05c8627031c
SHA1 516ff3efa0dd564d4c9334e136e8ebfb9159231f
SHA512 3d38e60101bb535a6e09d26bd553194649348d2fddb44e841ee5d2912a56d956e75b7f8845c09837f367f430f41b07c05ff17cea2ef49ae33855cd2f6cd943b3
SSDEEP 384:9ZIAdvQj8Yl/MgOQPd99MVn58AQEf/X0Aqhi:bBdcjEjqXW8af/Eji
TLSH
T1EB52B09F6DF4C4A6DB06922F02DB169EB0036291B4FC97EC81FBD0F04D8A6881864DF5
MD5 SHA1 SHA512 SSDEEP TLSH

Password

bCVCn4xq

email-html-2.txt

SHA256 fb381211f5e3711032eb04696119e143af71d2e30b413a6e74667f2236964a88
MD5 76e0ee1644054445267dd9436f514319
SHA1 9d55d5c5710273943d1a3045c27d91216761cd15
SHA512 667dfaf92c252ba074491fee477b7ed6bedd4b24b7dc40e1042edfa0a5990af7a48655e4a92351d3bbf5970a517276e12aa9d208b4ae1c334f31598635c7af3d
SSDEEP 96:H0WGSTfST3o6IoQ7Fe9SwRCRdwfZW/LwaSTptUPlpcp1eosI:jm3WG38M06T
TLSH
T17E937746D6150A025DBA1C61F8777FD200984F0713EF4EB037B1A6AB6EEA87957803F6
MD5 SHA1 SHA512 SSDEEP TLSH

email-plain-1.txt

SHA256 d1843c99491eb8708bd65eb2ffb02ffbba5fde4555d3bb704dd65bd6e5895281
MD5 755adeee08c79e0a0b386bd3ad9cea05
SHA1 4cb02d316e1241055b4813ab32c590f081cdfc24
SHA512 cfea1e4b53dd5b8c93ab3ce1c27c43d9c2448e7f8b09986f8b87d26d98958e63d3fa2b8bf777b2459355203cb092377990909d39045d1d7d63ddd9b299d34315
TLSH
T1072141FFEB47257121A2C21B385E2389FE4B412CBF6B1457782A62CC8330B01673458C
MD5 SHA1 SHA512 TLSH

teplore.jpg

SHA256 51eea2eb4a995a5e20dfb5cc8c83bb30e42df05b88bb9852f9f5cd9398e6f5c2
MD5 b01d6d2173aa901687277e6672a33625
SHA1 988cfe5d1546ba07552e1318118490c6854c0214
SHA512 74e796fc2e04fbae7f52ee4a1fb79b361e863340d8f6e312f1a0a21d9cb1aa69fbaa0c4b3f3655ee00743b92ee9f4ba0dc46ebfb03da519e5a044e07fbe3cf81
SSDEEP 96:+HEf3FR0opiWeiipu6DZi0LSGA6JInEE3NbrJlrSFaKOkvT:Ey3FOopiWe7pfD/5RINnr1KOk7
TLSH
T102917C3FE7893D608EF754FB64C5D12AC8458EAFF387901122B05CD6743C4E686982A7
MD5 SHA1 SHA512 SSDEEP TLSH

Password

bCVCn4xq

unnamed.png

SHA256 c0d1b5e807a3cc904aed1cb07de3d1621c4428493891bc1fb1ac0f6553c3ceea
MD5 5b49c5be3f812f654bad924fe59f906e
SHA1 9c3b47a4d9d97392d35b029f9f764f03ac35dbb8
SHA512 0290240bd46afc0cc787e4648e63765f751627ca02fb01cfdf03e6030d739c635422af9bf766bdb36156e73ee8f2d758da4a853ed81f251ac2f1eb5958dcc28d
SSDEEP 96:p0jAoCPVTnbJYRLwc6raoChNPlRVtHFZL7lBGg44JDBIVI8Vp4Bqxf:mMdTbJaUhqhNfr3aglIIg
TLSH
T1E7C17B3FCD137AF220848369B298E003CE7F7AA0FCF172D8821949E02944E665B58687
MD5 SHA1 SHA512 SSDEEP TLSH

Password

bCVCn4xq

RFQ# QUOTATION _ PO-20260602-7701663 __ E2S A105N - PROCUREMENT-password(bCVCn4xq).zip

7fc4c4db0f830e36de93cb73cf0f651b9589343acb447a0942310eaf689a2c55.eml

Email Headers

Extracted URLs

QUOTATION_#PO-20260602-7701663 E2S A105N.pdf(783KB).lha

QUOTATION_#PO-20260602-7701663 E2S A105N.pdf(783KB).exe

mscoree

dotnet

br.png

email-html-2.txt

email-plain-1.txt

teplore.jpg

unnamed.png

Sharing

General

Malware Config

Signatures

File Explorer

RFQ# QUOTATION _ PO-20260602-7701663 __ E2S A105N - PROCUREMENT-password(bCVCn4xq).zip

7fc4c4db0f830e36de93cb73cf0f651b9589343acb447a0942310eaf689a2c55.eml

Email Headers

Extracted URLs

QUOTATION_#PO-20260602-7701663 E2S A105N.pdf(783KB).lha

QUOTATION_#PO-20260602-7701663 E2S A105N.pdf(783KB).exe

mscoree

dotnet

br.png

email-html-2.txt

email-plain-1.txt

teplore.jpg

unnamed.png