pricelists and offer[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
pricelists and offer.exe
Size 510KB
Sample201109-19dmbcj36j
SHA256 1cfd5099c6a8bf03aea60b09f4e7b829eadfcc1c0cc55f2c8bfbae01c03e56e2
MD5 8d79253bee8a8bbaf45bef3e701457e2
SHA1 e7cee85eb44f7fccc5ace1b1accf0367aec25647
SHA512 a9c6cb93988d9b445098fc7266671470814b6cae218cd35002645bc9239e0dd908a90359679409a35f7a13d61a4713cc87c13c9f6da6122197b38311867f6888
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

pricelists and offer.exe

.exe 510KB

pricelists and offer.exe

SHA256 1cfd5099c6a8bf03aea60b09f4e7b829eadfcc1c0cc55f2c8bfbae01c03e56e2
MD5 8d79253bee8a8bbaf45bef3e701457e2
SHA1 e7cee85eb44f7fccc5ace1b1accf0367aec25647
SHA512 a9c6cb93988d9b445098fc7266671470814b6cae218cd35002645bc9239e0dd908a90359679409a35f7a13d61a4713cc87c13c9f6da6122197b38311867f6888
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware