PO#7442,pdf[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO#7442,pdf.exe
Size 420KB
Sample201109-456a3cydsx
SHA256 98cfc2f76ee8cefd9aa0b9be4c317800223f93ffb6e63577e8a9466693585515
MD5 b940381f5bd10911f82f9b09917ae6de
SHA1 8d350cf0f4d710dd7e9225cf104bb430c07fb0ca
SHA512 bf7b91697e720fb1598ebbf216890b7095a9c7d4d669e80ffb14b09159781e9000ceabef0691138b9db7b3b84581631c601be4c652bbd047e894054f0b66918f
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

PO#7442,pdf.exe

.exe 420KB

PO#7442,pdf.exe

SHA256 98cfc2f76ee8cefd9aa0b9be4c317800223f93ffb6e63577e8a9466693585515
MD5 b940381f5bd10911f82f9b09917ae6de
SHA1 8d350cf0f4d710dd7e9225cf104bb430c07fb0ca
SHA512 bf7b91697e720fb1598ebbf216890b7095a9c7d4d669e80ffb14b09159781e9000ceabef0691138b9db7b3b84581631c601be4c652bbd047e894054f0b66918f
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware