PO_#2576[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO_#2576.exe
Size 393KB
Sample201109-41xt39fj5e
SHA256 65a02f6b451bb5ccf5d443b7976da84cb80812e24a909d1038423bfe5ac5e2b8
MD5 03afc2c56794a27dd1d293ee657925c8
SHA1 e62ceaf311536d1f66c9fea2d269e678c44c46ae
SHA512 0042d776c26d92bad30ec8ddc0cbd14a497ffdb8fa09b4cf3940419f7642ac4b5d079c680fba41dec10c4b722fb48872ddd26ecd034ce53a64bda3948332e795
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

PO_#2576.exe

.exe 393KB

PO_#2576.exe

SHA256 65a02f6b451bb5ccf5d443b7976da84cb80812e24a909d1038423bfe5ac5e2b8
MD5 03afc2c56794a27dd1d293ee657925c8
SHA1 e62ceaf311536d1f66c9fea2d269e678c44c46ae
SHA512 0042d776c26d92bad30ec8ddc0cbd14a497ffdb8fa09b4cf3940419f7642ac4b5d079c680fba41dec10c4b722fb48872ddd26ecd034ce53a64bda3948332e795
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.