22062026_1504_19062026_GST-RefundAL27052600952P[.]rar

General

Target
22062026_1504_19062026_GST-RefundAL27052600952P.rar
Size 741KB
Sample260707-srn4wagy6j
SHA256 136c75bdb045c3143cf976ee3df38f621d9a4935af401e15568c2411216d1e8f
MD5 2814147b9620a32926247cfca2c42b74
SHA1 0c5dca16b67e18c1f5f4e2fc642e26fcc318107b
SHA512 d4429d721f44297af145cf7cc420ca1002640ee4716806fe819075eb4ee90a0df02ee3be13f2e6681e8a8850c914994bbf414f36f50b35e34298b7e9343d9d55
SSDEEP 12288:xTu6UxK0yEjUcwCaJpV1kXOYI0t6zGB43Pc92RoEFLhXZngqGX5bm4D/aQYN0:I6YZJjUcw9b2NI0P43PIaoEFdXnGX5bV
TLSH
T1D2F4330824C8E1249B065E45B691E10B9B0CAA25F1F1F774A6FB1701A54BDEFF83FA54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GST-Refund AL27052600952P.com

File Explorer

22062026_1504_19062026_GST-RefundAL27052600952P.rar

.rar 741KB
GST-Refund AL27052600952P.com

.exe 783KB

22062026_1504_19062026_GST-RefundAL27052600952P.rar

SHA256 136c75bdb045c3143cf976ee3df38f621d9a4935af401e15568c2411216d1e8f
MD5 2814147b9620a32926247cfca2c42b74
SHA1 0c5dca16b67e18c1f5f4e2fc642e26fcc318107b
SHA512 d4429d721f44297af145cf7cc420ca1002640ee4716806fe819075eb4ee90a0df02ee3be13f2e6681e8a8850c914994bbf414f36f50b35e34298b7e9343d9d55
SSDEEP 12288:xTu6UxK0yEjUcwCaJpV1kXOYI0t6zGB43Pc92RoEFLhXZngqGX5bm4D/aQYN0:I6YZJjUcw9b2NI0P43PIaoEFdXnGX5bV
TLSH
T1D2F4330824C8E1249B065E45B691E10B9B0CAA25F1F1F774A6FB1701A54BDEFF83FA54
MD5 SHA1 SHA512 SSDEEP TLSH

GST-Refund AL27052600952P.com

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c2c321b1b3a3409d9c1799e78e3c1e99040403a1fc074c59b66bcef0e665ba06
MD5 796a26cfefd43f2f75f1e921c1e3daf2
SHA1 56f66d043cc1ce5158f91b5215a34532be61bf39
SHA512 02af275e91959075958ae9d5e12714eece0b83d2a8640906de3de837efcb69fafdbad18fb7d6fd839fe1dfe4d6e58cdb1ec442e63dca252dd4d53af1290cb3c6
SSDEEP 24576:xIFzrn0cIJsUZjLr0g9HjQI6YidJk7RMi:xIFzrn0VjjkmHjQJe72i
TLSH
T18705121CA21DC013E16A03B99B62F13413FAAD8DA511D3499FE4FDEF39B6B060D417A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

784738

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Administrator\Desktop\Client\Temp\tosFPFBjof\src\obj\Debug\rTFu.pdb

22062026_1504_19062026_GST-RefundAL27052600952P.rar

GST-Refund AL27052600952P.com

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

22062026_1504_19062026_GST-RefundAL27052600952P.rar

GST-Refund AL27052600952P.com

mscoree

dotnet