SecuriteInfo[.]com[.]Troj[.]Qbot-FS[.]10202[.]30808 | Triage

Sharing

General

Target

SecuriteInfo.com.Troj.Qbot-FS.10202.30808
Size

620KB
MD5

bbd2a8c5aa09cc56e34f460a5e6d1b50
SHA1

32ca5996c4bdebf749d0bba664f0557032625e17
SHA256

30294b7042b6e94b7ac7d2f6641b89017ace586f42143b3b61e4286e2c6e7af8
SHA512

961926bb28d12d7d98d0cae027a7ce4218d769553e04ce0396be796e2c72c4dfc9962523aa9c8938426c65e16983c87a4513355feeb0e6f30f99f80a9ba919f6

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs
Detects CryptOne packer defined in NCC blogpost.
cryptone packer

Processes:

resource yara_rule

sample cryptone

Files

SecuriteInfo.com.Troj.Qbot-FS.10202.30808
.exe windows x86