Overview

overview

10

Static

static

3

Invoice 2...nt.exe

windows10-2004-x64

10

Invoice 2...nt.exe

windows11-ltsc_2024-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    201508031142450444.imap
  • Size 785KB
  • Sample260910-ajx3psvtbt
  • SHA256 21b8097a716a9d90351ebf3fab0413938c1b7804b61efa8e1be43e3bbaa5d268
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 201508031142450444.imap
    .eml 785KB
  • Invoice 2015010811732274 document.zip
    .zip 568KB
  • Invoice 2015010811732274 document.exe
    .exe 623KB
  • email-html-1.txt
    .html 501B

201508031142450444.imap

  • SHA256 21b8097a716a9d90351ebf3fab0413938c1b7804b61efa8e1be43e3bbaa5d268
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Date

Mon, 3 Aug 2015 01:33:49 -0700

Subject

Urgent invoice

Content-Type

multipart/mixed; boundary="----=_NextPart_000_005F_01C2A9A6.01D754D4"

Received

from rob.robertoalimentare.com ([108.179.238.115]) by mail.akparti.org.tr (IceWarp 10.0.7) with ESMTP (SSL) id QQS09916 for <[email protected]>; Mon, 03 Aug 2015 11:41:16 +0300

from [167.88.9.86] (port=55164 helo=User) by rob.robertoalimentare.com with esmtpa (Exim 4.85) (envelope-from <[email protected]>) id 1ZMBBj-00089a-5Q; Mon, 03 Aug 2015 03:34:33 -0500

X-Mailer

Microsoft Outlook Express 6.00.2600.0000