e92e741e5a75deaa02f45df29c532da6e44d9cd887623cb40b718241836b1a15
- SHA256 e92e741e5a75deaa02f45df29c532da6e44d9cd887623cb40b718241836b1a15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RFQ_PO-30_09_26pdf.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
RFQ_PO-30_09_26pdf.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
invoice_30_09_26pdf.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
invoice_30_09_26pdf.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral5
Sample
invoice_30_09_26pdf.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
General
- Target e92e741e5a75deaa02f45df29c532da6e44d9cd887623cb40b718241836b1a15
- Size 2.1MB
- Sample260930-e818wasxes
- SHA256 e92e741e5a75deaa02f45df29c532da6e44d9cd887623cb40b718241836b1a15
- MD5 cbdeeca460570781f66791663b88b63d
- SHA1 2f6c4095392112dc3ecf0f4422e81614f4e68cd2
- SHA512 78ed668109ce5d6c35d155ab685fd35f819f35d9cd31f2e12f9b4e903ad87625c7d34984eec055e8b05cc7e1b8290820969911a621ef30c356b06a1718de13f4
- SSDEEP 49152:9Nyr+VMtha1DZ/baNax16SzdYlt87GlLoF:nyiVTj/WNX0dYli7NF
- TLSH T1B7A5333D5032B36CBB0F23F323E276578DE9126FD1DA55BBEE851538A83008DD066666
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack002/RFQ_PO-30_09_26pdf.bat unpack003/invoice_30_09_26pdf.bat unpack001/invoice_30_09_26pdf.bat
File Explorer
-
e92e741e5a75deaa02f45df29c532da6e44d9cd887623cb40b718241836b1a15.zip 2.1MB
-
RFQ_PO-30_09_26pdf.zip.zip 1.4MB
-
RFQ_PO-30_09_26pdf.bat.exe 905KB
-
invoice_30_09_26pdf.zip.zip 709KB
-
invoice_30_09_26pdf.bat.exe 905KB
-
invoice_30_09_26pdf.bat.exe 905KB
RFQ_PO-30_09_26pdf.zip
- SHA256 23f6e2f7dc3e1d6bbdfb72e3c81128a8ff832d1483669d0c64d30cce705ff60e
- MD5 c14ad986f8fc825495c5b0ceb36928c3
- SHA1 818200df94b6c7e5b7c280ab29d5dc87b68ae489
- SHA512 9a2e06acc200e054de46b90a089a4eb6b81349aa37169197b9361d258085626b25f79c034f4f43e9459aaf51a6cd938a57459be94de605a40bc4634ae601d5c7
- SSDEEP 24576:mXDN5YTcEhNUBxNMmY+WX5Tls9cqBZphIz/vi5tQEhnUBJNGmYSWB5TtsbSAXJt/:oNyr+VMthaUz3GtHUtGFLS3
- TLSH T19B6533399032B768BB1F23F313E276178DED126FD1DE55BBAE851534A83008ED066726
- MD5 SHA1 SHA512 SSDEEP TLSH
RFQ_PO-30_09_26pdf.bat
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fd9ed11f3b7d5a684e86ae9c4bc8525229f6b7702793fe709893f9e1c72522ec
- MD5 0406804305549934b4a7fb05c239eebb
- SHA1 7b9aab85fbdcce4bd5ec18f12c6b660ebb3b6169
- SHA512 d049b960e182f1fce40573cd250db9519794a2d54b7890bad4975574832d4fb7bc0c277d1025f38a9a467151c441f6665d456318b89c705d91d7d220dd7d9814
- SSDEEP 24576:P1sfgdIYs+EIujDYzK2jVG/PlWI3jjws:VREIuR2pG/PlWIz8s
- TLSH T16615F168739ACF22C5A163B40E61F37103769D4EA231C3039EE57DE73D7AB4619681E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
917230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
888KB
Virtual Size
887KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
invoice_30_09_26pdf.zip
- SHA256 fefbe40ebe9c148b83819ea762d96dbd9ab9b61223aba06859ab079788812e0f
- MD5 7df6acf5d8cfae5634e208004c0ddf4b
- SHA1 6082c070f253711e6752d62841e9fbe17262fc47
- SHA512 4afeb795e22bf376e1a3087687e101491dd10813c12affabe8abfa07bd40c60b508a1b93a2afb030ef69d6c42441c350bf60e0dfc62fda9fedfd69266f4b250a
- SSDEEP 12288:lDXsgZl15RnKNcOapKeEhw0CPvBIj1G5fM+tY/2H2X5TiUtfszJCRjOJa8ZsEqb:FXDN5YTcEhNUBxNMmY+WX5Tls9cqBZp4
- TLSH T19EF433799131BB6CBB1B32F323E276078DD9125FD1DB547E9F841538A83008DD066B66
- MD5 SHA1 SHA512 SSDEEP TLSH
invoice_30_09_26pdf.bat
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fd9ed11f3b7d5a684e86ae9c4bc8525229f6b7702793fe709893f9e1c72522ec
- MD5 0406804305549934b4a7fb05c239eebb
- SHA1 7b9aab85fbdcce4bd5ec18f12c6b660ebb3b6169
- SHA512 d049b960e182f1fce40573cd250db9519794a2d54b7890bad4975574832d4fb7bc0c277d1025f38a9a467151c441f6665d456318b89c705d91d7d220dd7d9814
- SSDEEP 24576:P1sfgdIYs+EIujDYzK2jVG/PlWI3jjws:VREIuR2pG/PlWIz8s
- TLSH T16615F168739ACF22C5A163B40E61F37103769D4EA231C3039EE57DE73D7AB4619681E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
917230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
888KB
Virtual Size
887KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
invoice_30_09_26pdf.bat
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 fd9ed11f3b7d5a684e86ae9c4bc8525229f6b7702793fe709893f9e1c72522ec
- MD5 0406804305549934b4a7fb05c239eebb
- SHA1 7b9aab85fbdcce4bd5ec18f12c6b660ebb3b6169
- SHA512 d049b960e182f1fce40573cd250db9519794a2d54b7890bad4975574832d4fb7bc0c277d1025f38a9a467151c441f6665d456318b89c705d91d7d220dd7d9814
- SSDEEP 24576:P1sfgdIYs+EIujDYzK2jVG/PlWI3jjws:VREIuR2pG/PlWIz8s
- TLSH T16615F168739ACF22C5A163B40E61F37103769D4EA231C3039EE57DE73D7AB4619681E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
917230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
888KB
Virtual Size
887KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ