PO 304161[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO 304161.exe
Size 106KB
Sample201022-8mpycs3c92
SHA256 da8df4bae3a3ee7500b5de14c09ebf28b2928442c0282d713085efe0fa559b38
MD5 2f3934dbe42ecb3474303507fbe15255
SHA1 8165a73df4b886d593985bbfe4185d98b1bbfcc8
SHA512 15446a812a09c6cbc149865aa78873c6a2a2c2f80158882b5108f6643e40becdb2c09bc9e9d206fb38d9a7d93722cb7371f8a90e12d9c8cc9fc161bad8c76217
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

PO 304161.exe

.exe 106KB

PO 304161.exe

SHA256 da8df4bae3a3ee7500b5de14c09ebf28b2928442c0282d713085efe0fa559b38
MD5 2f3934dbe42ecb3474303507fbe15255
SHA1 8165a73df4b886d593985bbfe4185d98b1bbfcc8
SHA512 15446a812a09c6cbc149865aa78873c6a2a2c2f80158882b5108f6643e40becdb2c09bc9e9d206fb38d9a7d93722cb7371f8a90e12d9c8cc9fc161bad8c76217
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware