Bank Receipt[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Bank Receipt.exe
Size 697KB
Sample201020-q4a5jas42e
SHA256 82111ffe99296ab2292bfc56a031ae1daf701520ead377ee34e4a72f31c75285
MD5 22e1590bb7500dd34e74dec3ee590707
SHA1 fadda3cfd23ccff08cfbdaa015d69ed11f8e766f
SHA512 2822560133159e991fe1d6c1f3ea0410f5193cf22639360a0c29406d56a66a2ca0ac1e7db34090c43e9b4b67a3d30a52b3d9a843ded17bb0708f81fc0d21bd9f
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

Bank Receipt.exe

.exe 697KB

Bank Receipt.exe

SHA256 82111ffe99296ab2292bfc56a031ae1daf701520ead377ee34e4a72f31c75285
MD5 22e1590bb7500dd34e74dec3ee590707
SHA1 fadda3cfd23ccff08cfbdaa015d69ed11f8e766f
SHA512 2822560133159e991fe1d6c1f3ea0410f5193cf22639360a0c29406d56a66a2ca0ac1e7db34090c43e9b4b67a3d30a52b3d9a843ded17bb0708f81fc0d21bd9f
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware