CLI[.]zip | Triage™

CLI.zip

SHA256 0e6f5670ca4fec8f3609ab8d8498cc3e5eca2e2442cb491f26853688e9f50fcf
MD5 aba619a263b72f6dd157c627ef393c5e
SHA1 863bc11a38417f148d244fa4bc2fd795882843b3
SHA512 93aff645bf66ee51172c77cee1299269e671eda7c5e48c846469a0cd2e0dec1cd6f3573e4e8f4f8124391574e85f02931acca662bf77df8eab9218b3f05f6e32
SSDEEP 196608:tadyIY+bpbo+3ldZ5Ead5n7nq6apVhIGhRB34mtdr0dDXI:G1bo+Dfdl7nbapVCG5o2gFXI
TLSH
T1FC9633F0E1C84A679DAFD0B0EAD6438BA2D402FDD74E514690E076D8E49B3DA3D2C45B
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/26-010-04_I300CLI.pdf

SHA256 10e23a229bf5db9214f8f18bb78bfee15b290a411daa891aa089b439abf58172
MD5 93e1238ccc5b8227c1ff2c4f210a7637
SHA1 85591430c59fc535ee1d6213c23321ced8fbb36f
SHA512 3db23e55a52d498ac87c08331dd9e48b119f764ffabf4322619bad6818df3c646b4f604194260ea7965032b134cd79af1cb1cec1a9e0aa80e7eebe9d831ede9b
SSDEEP 49152:cjKtSvSII7oTEkuRK96zRV/tpwpm2cAtwItgqA34px47o1b:cjKStAkuRK9+1pAvcAtwbn4pxb1b
TLSH
T1FAA51211628A4C8CE0D353E5E3627877419EB6A361C75C0AB8AC47D34F42F5B67A8FD2
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/MO/26-010-04_MD001.v00_I300CLI_N1 NL0.pdf

SHA256 aa24c9496a76b7951bc6f04f5c4c41696c0814016930dec7a4a953ced7242f34
MD5 11834739971bf0f2e24603f66c697502
SHA1 ed29048a6e2b9af3859ecc7fe25b7931541e4a62
SHA512 9569b045cbad10e2a92522fe04b4a9dbd5ec4886023433bc97116ec87622eb76fcb0aab268f343fd82e38ea384e52cbf5cf79d3526db021d06fc7c67a1f46417
SSDEEP 3072:MOoYHZgtxuvMXiID1XgYmjZnNbG2oBS8xnJ4InV1l+WIdFN:MOoYu6jZ1GFQ8lJP2FN
TLSH
T16404C0090589D70DFEA3D8F7EB6AD125F81573178E80D5212E29021D9EE3EA2B7C3719
MD5 SHA1 SHA512 SSDEEP TLSH

Extracted URLs

file http://p.p.de

CLI/MO/26-010-04_MD001.v01_I300CLI_OF N1 NL0.bc3

SHA256 f2fc8b881956a3aadd9342414ee20e7a3d2be8774e429441618b0f652d620460
MD5 2467cf2a4943e36ad30a49ef337d0a02
SHA1 ffebdd4b1e06eeb00377663df19200e4c5252929
SHA512 5bf7067b8202e2b468e2e5764ca90e7f9054e66b67ccbcbb2cce2dcce7a55142e8e107c345001a17b604dda365820007b70563faf2bd33dae715c00a3f258177
SSDEEP 768:3mDsyPsx+/ygqDf9uq1YG1nqG5hE/rVFq5LfrwSbsC/FNekjG2Qhu:3mDoDH1LAG00ekj9Q0
TLSH
T19CC2D7A7C6D81F9287F32AD05347A143D36560A93427C89D95FF428424CABE8D3379BB
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/MO/26-010-04_MD001.v01_I300CLI_OF N1 NL0.xlsx

SHA256 ad12fd5b0004af502770c1f0180e6ef2823a31177123c2ff40159aea6e52cf24
MD5 19867b3c2815736c642e6d674fd2f442
SHA1 767f30c4576f4d66e3ac465faaabbcdd66a1a4fa
SHA512 1ce2a10dc4fe871c1fc23bef76fe0f5af0d84842b4257a7b514621686e5b6ca69ec20945b0eea10058b8a7a4f296ad5d4c96813917b7dfa8e480a665c2b36625
SSDEEP 384:lLImbogbog3tzRFUlczEcHF249QEZoOIqxsu5Kd1yExrNQ/Uy/LajzXlfMnNEAOc:drlbomtzRFTl4VOOukd1rUsPPoNERtu
TLSH
T152C2D10B6227C878C3436ABBA25610A0021C25B79D9DB687E500677D5F0B76614DEB3E
MD5 SHA1 SHA512 SSDEEP TLSH

office2007

CLI/MO/Thumbs.db

SHA256 46e36960bfe9b431dc42903aa67437cd0831230eac97abf341c7e6fbf205919a
MD5 ff0494d4e785406252b5495a33ae8b12
SHA1 eaae62f0b526c243d21f4947462803678b6a4e47
SHA512 3e82ae406fca61e7c4550c62bfe62d1878ea624ff257b6e75196d42f9a99a0fdb0e995ad79c5a6ea0ff3360da073d5f6a4aace1769b067d63afc2686b850bdd5
SSDEEP 48:rpnHUVyeosUuERAeVcVcVcVcV4oRHVgUllA2UhkS94GC8xmdddyddddddddD888v:F8Fo4E7uuuuhHblyuSWx218888
TLSH
T107C11F076904CF46E2F9A27C6E07CB1C4B087E1C7AD7A7AF2012BA967E71370499E059
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/26-010-04_NAVE 1_NL0.dst

SHA256 c031b7e01c9e5e76999f94efdc1d131d30a69a3a69641fd8b049a037efa3abca
MD5 d90499a845ba33e53567aa311b87012b
SHA1 4f7a5075bf198244ac1cf5d2bb86ffdafe6d8f73
SHA512 f40f3f6e7f6b09c1445cd20b870a0268e046f65b1d0558362066d54aeb4373c68b79d459608e4c04b1a97dc6d80032133e7b4f26742310513a650a79c997a1cb
SSDEEP 192:AiuPE4W6/WUJ50WcRzQLWQW1+bwwbYaFgMQksk:KdW6uUJ2WcRzcW1CwwbYAgMQk
TLSH
T1D9D2D942B39EE481F1AD5477B9F4B8A663854CDB9F3700A82FBDDECC48192895098D4F
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/26-010-04_NAVE 1_NL0.txt

SHA256 c2738ee720fc9a426f73f56358e7ca724e495c320e9fdf3c0f6b09748ff79066
MD5 5e6f9bece3aaa24a5cc03a6957c6e110
SHA1 c3b5eb75ec8da31352e06b12982f29e307e906f6
SHA512 5fc3086e6ac1c6c100974148663902312fd8727bb86965db2311e20543d8573c14f9a3eb68b0942b6e3cbec5071742379ad6ee75cf356ce51bbb4dd2b387022a
TLSH
T16B515239B8CB2997437602F8E3A7E73BCD0DBA815791C190AB7D11E4249C9648768D38
MD5 SHA1 SHA512 TLSH

CLI/PL/I300CLI/26-010-04_I300CLI_N1 NL0 OF EXP.dwg

SHA256 215ee919012512a99ce25607e81be2e4ecb809a0505d883f665bc5bd4fdfb545
MD5 1ec25aa6ceed5d4b0b984a11964e9320
SHA1 ba77950f4fb3275d0bec0e680f8ad01b5b2e7191
SHA512 5cdfebd645f71b30e6c7607a41fef58582c50816f6ddd280fcc9ac79b4120301b1a1dddff8bb5d9f8f234ef277e7f34c3b4b0f5a87b51135065e55b873115124
SSDEEP 24576:RHsjebPWecy4rcNnZieaZP/JiPP+e1FkJiFr/WzJPAYIx:Keb+ecsHieahBMT1dr+M
TLSH
T1F855D069BE731020FD632EB6C66C8385D5EB760EC9120BC1792739FC5C586ABE18C716
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/PlotCfgs/AutoCAD PDF (General Documentation).pc3

SHA256 e127083cc6b21c939c7b4a0bee171c3c3f98f3260667e2dfa07009aba3a01843
MD5 e4ee6019cbad4a25b394031b2eab00be
SHA1 172bac098489b6b4eb122ff0c297e221ad84b006
SHA512 bf66697e213105e94952348df6cdcf63ae887dd1b56bf843f73e5560b1eb2fc9847e579dfc520a2f7d88d305f0218ce548336c1e390f1046acec9a3a54b8a511
TLSH
T17721DAA3483771DE6920C6770FBF6212704D040922BB13B31B69592919B18652F580C6
MD5 SHA1 SHA512 TLSH

CLI/PL/PlotCfgs/DWG To PDF.pc3

SHA256 5eb45ef5d43b519bffba11b033403cde635ce584ecd85eaa44528c19a0eec4d6
MD5 2e41175c1fc82b2317c2e21b7c525407
SHA1 f3d3e733e569c96e9142eb09f6ffa9be0733d8a6
SHA512 ea630083b2813f7d9d65bda6d73a177a8f89ac866979bbc6f5647c96425f0f2febb126b3a8dd021bd5919f9bfe3c33218876761d98e4c011a905dba0aaca378b
TLSH
T1D371BB26CCB04CB6591B8638152AA70635134F874C6A7D44BBCCC2DCEF0CB5EE5BA59D
MD5 SHA1 SHA512 TLSH

CLI/PL/PlotCfgs/INSTRA.ctb

SHA256 091628bb07f5a22cc9b56f53309dd6c5f81b605865a864d9a6b3d4a258fbb863
MD5 420a99544a1f1b0663924964e6458198
SHA1 d2900ed98667602a1109cffde7f2de8d199ff516
SHA512 2aeffb13807a8f6a36fd8a60f03dc8ec43635752cd0d301c74ec8f923243c3244f1042435832b116e518074f532338472400be92747d08d45379e1f6f0bf847b
SSDEEP 96:LfcL4c0nm4CuEDaSr5F8/dL4c46UbmmEgnxS5mxchOOOOAL+++++++++ZGGGG9i/:TcL4c0nmcbUynoTxc+IGGGG9iiiV
TLSH
T139A1E78C7643793D487AA931150FB080CB7A50920DD4CCA99B98F71F2E0C2B9ED77D86
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/SheetSets/Architectural Imperial.dwt

SHA256 993d70b7a517827e3dfd69becced113f81dc3de0b908ac5477f29ec9ec3abb16
MD5 93769d8f6b765fe9fa1ca535231ac77f
SHA1 103caada38529cbebbb248f9a1283296f0e0c438
SHA512 b16668da221f40941f8cd0973a60d27b2a0f5c3f6dceb91c586baf07be08562c57a723435ba3b3c2e40d5ca43b19ea4ea3ad0dc56f1a4bd0f4011af20410740e
SSDEEP 768:itEqPIyEUzqbRfISDCLscMnRD3eXMYFmsmrS6oii7YmEoXp9FVRbG/1HCxHAJRqX:i5z8IECgc6KX7osmrJ3aYm3dVRCdHnqX
TLSH
T13D23D01793AB8415F92286F185FD5AA259187C976331C30E17912B0E8F727C8F823F9B
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx ins/Rx_LeyI300CLIM_tuberías hidr-refr.dwg

SHA256 a3348c19f1dd128efbe3860b0da044fbda417854281f18293d9dba57c7994c73
MD5 c4edeb017b5ccbc8d9e75c64f0dfa214
SHA1 9b72c85104405c762a85a2d6840733b62f3dbd7c
SHA512 9bf98180bd74973ad527fe7d9bcf3599e49dd474bfff8ad8aefbd9c473176b7cd6e90906a27faf15811327d43f6edf8e07d90b19823d9c67069af125e4761140
SSDEEP 3072:qU1VE9wW4WEJiJDK/b9GYuKOMUWCssR57walV7KaKPvByjNCSV:qUUSWREJ5R79w5F7KagB6Ca
TLSH
T193D3E02783E71512F96676F68BF30BA3DD3C28C21925A45E43816B0D5676A80A137FB3
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx ins/Rx_Ley_I300CLI_Equipos.dwg

SHA256 a561a20d4ff1ac27621de5690054d25450d740d6adfce63d04a6e18adba39bfb
MD5 00b227b4d0a2aa3bf4129e6ddbeddb4e
SHA1 e809635f981eaa2178df122c27464971ce9f6868
SHA512 aaa24d71276ee41e32c7745b01818dacbba04d999240b7190453244d74429e0bd9c33f6e3c296402a620642306e276028ca37c2bfa2555fffb12f6719ea97426
SSDEEP 49152:VX9qBW12+4udNdyoaqrXWcWkfEdcSR/Htm/H4CJUfqzdE:x9qBg2Tudjyo5rXNfZK/Htm/YCJ8qzW
TLSH
T187A502A31B4777A1F874997DE3638F2DF1B290ABF3BBC44AC5417A2D06164484E7EA01
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx ins/Rx_Ley_I300CLI_leyendas Equipos.dwg

SHA256 e304b36ad2be49b4d7ec285db0974b16ee3e8b83bb0a5fe48a0023096c0c981a
MD5 ee57388760a46b0e7c038579d56a782f
SHA1 fe7ec689c143f0c57c503cc372905f159f6fea2a
SHA512 c13692bd6a0289d9e581100b385b3238957bd30ae96b40275742ace095be9b61a9d1020718a66d05332513a0ee269bc1c992a718e9a39186bc1b7ce59f5f3de4
SSDEEP 6144:DWVkCw3FVZ8bihKHI+oXHX8Z+DXJUQYiPjmE7mS/hBk:DWOCu1MBQYiPCE7mS/he
TLSH
T17434012743D70116F42F6AB347B50A634F3A6C801B16981B1B126B1D47BB6E1B673FA3
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx ins/Rx_Ley_I340CLI_Conductos y Rejillas.dwg

SHA256 95f620e5d77bb6cbd371332b854d46005865e8a229a7a01de01f97c6b68d7ea9
MD5 6ebee5f007ba221298018963d9ec1e17
SHA1 4ca6708e74f4b5d4ab85533acf2bd42beb4a8179
SHA512 1b51de0c9d71936cff8ba1af0c87d937fc9dceb5049d9288adf7a13c8ce6344da8ec29778279e07464f026a0df3dc0dd0942abdce7a99e37821daf69e5bff6c1
SSDEEP 12288:LjsdHPVW7KcCD4vqUekTAENLKHuG9qEk6GrzzZx0oCi:GVyCAKkTmZtgf0Hi
TLSH
T123B4D063028E8481F4555EF4465EE772FFF990D24B31FB868D8302654C5CEB9EB1CA89
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx/26-010-04_CAJETIN (sin Firma).dwg

SHA256 e71946a47935ee8cdca547072455b64c4382678928fb14428446fa6798ce88ab
MD5 e9d42d8a77a77d48533ff9674de623ea
SHA1 f23595432fd88944b742eb3ad7c27f293e81a92c
SHA512 00ca5d7a474ec04614e2c78389962de791e17d417bc2e0cafd4c0f1262c845e02635f98aafbd25eef24cecf9622e4c4ed54949c0e6f360f9afb73ddf70f41486
SSDEEP 3072:XkjFikQyekoYRO61qL1Y2+j7NQXAjvMxFKkfrKIEOBF8F:XkZikQlgRO61M1YFNQwUPtfr5F8F
TLSH
T1F4E3E137E36B4831FDE2E77532164E15CDE2A48113720F54CA526A4CA939B79024B7EF
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx/26-010-04_Refx_NAVE-1_NL0_GNRAL.dwg

SHA256 19114b586aba2b853037f5ff3bf1d1f193af708ce168da1b8693ec510afacb20
MD5 bf75eee647b552a0da8e04e2fe1c354c
SHA1 d7f7f8f7882c8229b61a62dc882d7fde12cf3068
SHA512 0718c3032009048e29041d9c03910fd29a4e50f1d10f1de24b50dec2340fade8bb690c9218b4dbc2ec23b9d4b4f760355f9e5608f06e5f5a0eb6a87abc1e2780
SSDEEP 24576:OpEXMOS+zGxDLV2S5itctPsm/Py6qLnqtDSDnisLLvHBkiHEBLKAy2z5ZdRW24DY:OpE8azoXA2itctPryGuibPVxg8d4YuK
TLSH
T10C95F1B28A752140F119967A4EC16BA3B863EC14BB02166635D5217473F39FF60BB3F8
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx/26-010-04_Refx_NAVE-1_NL0_OF_ER.dwg

SHA256 864c6e5d436869305a0a8bb0522ce2e0c7928b8b9cd256c1bb6802304cef8335
MD5 387b449be5e26f334888225d35d1cf7d
SHA1 87841cc9a7db03f5f3faba008fb8ca9ef7326bb8
SHA512 2afdd0734aded1a6019a028fafdfc986d5345f7554c829afd4c447b4d76a0e29a76aea5f323171123464ae96733257a5fd1e57fd28c981bd2fe48134355c22ff
SSDEEP 6144:qEDI6e22toebSoLhwgtOSw7D8PkFF3BrSm34mBzscTH69zlt/ruTzMfwqi1n14q4:qVX+oztOSsD8PkFNBrl3AR5t/oCSg
TLSH
T1F0A40153E3D7B849FB0C61318B095A63E1C3A80163BC1B60895F5BFAA1E73495F05FA9
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx/26-010-04_Refx_NAVE-1_NL0_OF_ER_Secciones.dwg

SHA256 1c4c52567dbb6b3885f1e179893ea83beb25b9567b3c35bd1a2219cd9c34b008
MD5 320b082d50875c6b6f0f45398726c448
SHA1 e099d06ec993711d1e1e584a85102bd3bdf1e3c3
SHA512 09ab7690a756eb152fa4e84ee795018b129709e455d90d940757d1c147dfbc5a5feabde35e12e70527866e9e0de91c91854544b95e207d3971602f3553d6cdf7
SSDEEP 49152:xIKQ5mLRtw+sOvvTaCNCMhhH1RJSCgr8GuxKqJrriZh3cAAuXiE:xZ9w+vTaCNCWhHbJSCA8nxruZhMK
TLSH
T14FB5E0A69EBB1754DEF2367009795283E4F3AD0FD5C02B14B80FBFF560E44A76268A11
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx/26-010-04_Refx_ZZ_ejes.dwg

SHA256 7ed9b4abbbaa4fe6a156bbbab9e104e350b2f83788203d5525cea9f0b98506c4
MD5 21a1a949c52de516a26b1435383ca05b
SHA1 c601fea364f29b1f921debcecf58eb17c44e3428
SHA512 ed1660cb7159b950345e7c1d159a13340efe238fa7b744a088a5f8d280fb4a45021b75235d436a2791e01831f7464d1e2a4c72b3c7b9714f2a400899457d9d72
SSDEEP 3072:/YMMt3jVBEU8zhUuDQQsqhHv/kG1EruJof3jzVJfn1mA/jtw/umBfMZAhIpgpr5f:/f8TV9OUvqhHiruuzXf1JRwn1Gcy+9V
TLSH
T13744F1A333042C44FF2827FB07156E73E293EE0237A44B119E5B5596F452BA4A131BAF
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx/26-010-04_Refx_ZZ_log_+0.00_Puntales.dwg

SHA256 e3f734a993c13486acaec6547d047d5a98a088c7b7fe153189933e3f3993c60f
MD5 74d843b8e1b81c48467697b4037f5e29
SHA1 ebed00943ddc8a5c60f78b7230dfa5809a28581b
SHA512 bbc9afc75b09223224e6a93dac482734e8d766ff53e20949ea66cd23095ea212920ab56480861c22a454b393cdedb3bc8d19404a2c953b5bae55f8bde42c5669
SSDEEP 6144:kJshdPrmsD5buVN/+9K7pkzkuZ/vBR8uvp2aP0G4YOlErxdrxTPqgYxvz4x:kWt5bs+c7pKkuZ3bp2JerZr
TLSH
T13994D1C72383188CE82C45B08DE64B8BF5AB2C4EF3536599FA5DCBF53118706595AE83
MD5 SHA1 SHA512 SSDEEP TLSH

CLI/PL/_Refx/26-010-04_refx_mosca.dwg

SHA256 fe4ff15035830751464754e987ef1defa51dab040d6f1d0c14d6f01a18fd7dfe
MD5 586e887a6e0bde96f2e6a91ab2cbf6d7
SHA1 65b8fd324e8ebde5a77a7a4e1c532048ced63c65
SHA512 0962e96b844db07b06fd504d6e1c66c46cd47a5f686d23dfa29f1606cfdc3c12d6cbea7281b9b62feeed7b8f86c0815a29d4deba8967186411472ef1c08a76dc
SSDEEP 3072:GA/i9iAsozWubRtn6mXEBcEB+oBwIjzuJf61twIjtw/D6MZUhIpgp6oIjn1e9f+b:GAq9iAsozWY+B+ozKfwTGPn1QSao
TLSH
T18F4402937306A850FF0C6AFB032A2A32D693794377F41B21CF427689F4157989619BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

CLI.zip

CLI/26-010-04_I300CLI.pdf

CLI/MO/26-010-04_MD001.v00_I300CLI_N1 NL0.pdf

Extracted URLs

CLI/MO/26-010-04_MD001.v01_I300CLI_OF N1 NL0.bc3

CLI/MO/26-010-04_MD001.v01_I300CLI_OF N1 NL0.xlsx

CLI/MO/Thumbs.db

CLI/PL/26-010-04_NAVE 1_NL0.dst

CLI/PL/26-010-04_NAVE 1_NL0.txt

CLI/PL/I300CLI/26-010-04_I300CLI_N1 NL0 OF EXP.dwg

CLI/PL/PlotCfgs/AutoCAD PDF (General Documentation).pc3

CLI/PL/PlotCfgs/DWG To PDF.pc3

CLI/PL/PlotCfgs/INSTRA.ctb

CLI/PL/SheetSets/Architectural Imperial.dwt

CLI/PL/_Refx ins/Rx_LeyI300CLIM_tuberías hidr-refr.dwg

CLI/PL/_Refx ins/Rx_Ley_I300CLI_Equipos.dwg

CLI/PL/_Refx ins/Rx_Ley_I300CLI_leyendas Equipos.dwg

CLI/PL/_Refx ins/Rx_Ley_I340CLI_Conductos y Rejillas.dwg

CLI/PL/_Refx/26-010-04_CAJETIN (sin Firma).dwg

CLI/PL/_Refx/26-010-04_Refx_NAVE-1_NL0_GNRAL.dwg

CLI/PL/_Refx/26-010-04_Refx_NAVE-1_NL0_OF_ER.dwg

CLI/PL/_Refx/26-010-04_Refx_NAVE-1_NL0_OF_ER_Secciones.dwg

CLI/PL/_Refx/26-010-04_Refx_ZZ_ejes.dwg

CLI/PL/_Refx/26-010-04_Refx_ZZ_log_+0.00_Puntales.dwg

CLI/PL/_Refx/26-010-04_refx_mosca.dwg