2USD SWIFT _SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
2USD SWIFT _SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679.exe
Size 430KB
Sample201109-3almrmjjzn
SHA256 c986ea8fc6725c76da91dff92d8ba6f8910c3cd54a7457f73839530aa8aaf002
MD5 b27c6b07807d2d53886556180ee8fcb9
SHA1 81811f0df48b01c76fc2e0586c531b1c93197a47
SHA512 f2f76e69929b83ed876ef060fbee607759e09b94741412afb5bf38189775c0b24e3f78f0218fe4d939612f3f256438f4813f70b7841a788925f3cb6c690a32a5
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

2USD SWIFT _SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679.exe

.exe 430KB

2USD SWIFT _SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679.exe

SHA256 c986ea8fc6725c76da91dff92d8ba6f8910c3cd54a7457f73839530aa8aaf002
MD5 b27c6b07807d2d53886556180ee8fcb9
SHA1 81811f0df48b01c76fc2e0586c531b1c93197a47
SHA512 f2f76e69929b83ed876ef060fbee607759e09b94741412afb5bf38189775c0b24e3f78f0218fe4d939612f3f256438f4813f70b7841a788925f3cb6c690a32a5
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.