Fwd Overdue balance request[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Fwd Overdue balance request.exe
Size 525KB
Sample201109-4p5drmp8b2
SHA256 d3f1a9f5aee95facc51d611b7deeef7da85a30c028be4a3cc9cd10d0e7bf99cf
MD5 327e095912044c837cd14c4790b5b722
SHA1 f2785765bf53962850454c04b2ae9a5781dad2c3
SHA512 29dc2737c9111bef912736b698a83e8295201317e8a062b8ec06b72ad4b4a40a0a291406e7f50e0947eeebd236bf2ced81aaf87c954ba1b7efea39c9208a9fba
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

Fwd Overdue balance request.exe

.exe 525KB

Fwd Overdue balance request.exe

SHA256 d3f1a9f5aee95facc51d611b7deeef7da85a30c028be4a3cc9cd10d0e7bf99cf
MD5 327e095912044c837cd14c4790b5b722
SHA1 f2785765bf53962850454c04b2ae9a5781dad2c3
SHA512 29dc2737c9111bef912736b698a83e8295201317e8a062b8ec06b72ad4b4a40a0a291406e7f50e0947eeebd236bf2ced81aaf87c954ba1b7efea39c9208a9fba
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.