Overview

overview

8

Static

static

3

RFQ 202607...al.exe

windows10-2004-x64

8

RFQ 202607...al.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    25b80a6ec781b945fa72196febdf9d1ccdf7b8541f23f7516e468260c87cb19b
  • Size 1.1MB
  • Sample260717-ecvq8aaw4m
  • SHA256 25b80a6ec781b945fa72196febdf9d1ccdf7b8541f23f7516e468260c87cb19b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectiondiscovery

Malware Config

Targets

    • Target
      RFQ 20260731392 _ Request for Proposal.cmd
    • Size 1.2MB
    • SHA256 9aa928b433983f53758e42961aa0cf8096a4211a5562bfcd7ba3cb63d902282b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    collectiondiscovery

    • Downloads MZ/PE file

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • SmartAssembly .NET packer

      Detects SmartAssembly .NET packer.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks