SecuriteInfo[.]com[.]Troj[.]Qbot-FS[.]29402[.]25291 | Triage

Sharing

General

Target

SecuriteInfo.com.Troj.Qbot-FS.29402.25291
Size

1.3MB
MD5

1f16d85a332e906bdb52798a693e20b4
SHA1

47ad555dffa907f0e916c2bd689c2fb75ae5874a
SHA256

03d43c49387d3defe1712109bbacd0fa9d670c5a59454f07e7c1837e52d7df6c
SHA512

9122068115338ddeb102efa7ece607136fdb25fa7ce3c53eb6bb457ea8d9fba49d23584e713f3d6f65df00d1cf710540993b6d66593954b80e0ece6a9a52b841

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs
Detects CryptOne packer defined in NCC blogpost.
cryptone packer

Processes:

resource yara_rule

sample cryptone

Files

SecuriteInfo.com.Troj.Qbot-FS.29402.25291
.exe windows x86