Invoice DHL BCNR001225724[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Invoice DHL BCNR001225724.exe
Size 532KB
Sample200716-mm5g2dgrn6
SHA256 2ac0c34c2f1ac910d5147ba24aeae1d279252a16f195aafc997215b4491b52f0
MD5 e742d3e950254b0ee6ff1bd95f75f350
SHA1 c4483f66bfddb447d2e43f78a20f9d119aca00f2
SHA512 075a264c2480341328463825602324f53693dead59fd2158dca85d7025b435eb6be1446e087f0fbe904101f5af88f7f23b0b0c2a0a3f1e4fa264eda5782e2ab9
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

Invoice DHL BCNR001225724.exe

.exe 532KB

Invoice DHL BCNR001225724.exe

SHA256 2ac0c34c2f1ac910d5147ba24aeae1d279252a16f195aafc997215b4491b52f0
MD5 e742d3e950254b0ee6ff1bd95f75f350
SHA1 c4483f66bfddb447d2e43f78a20f9d119aca00f2
SHA512 075a264c2480341328463825602324f53693dead59fd2158dca85d7025b435eb6be1446e087f0fbe904101f5af88f7f23b0b0c2a0a3f1e4fa264eda5782e2ab9
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.