PAYMENT SWIFT COPY PRINTOUT[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PAYMENT SWIFT COPY PRINTOUT.exe
Size 674KB
Sample201109-567wg23mc2
SHA256 895bd4c8d2a48b22575765b56e28816dfec0a3ab991140a62cf76802c53a07bf
MD5 2d7d758e0772d8415c74f0e7a97e9f74
SHA1 c6ff996d07851a9ecc9d6b962ea0f588c1e6972b
SHA512 2cdcbd3b262831375e518d294772a3bcc14410cfeb8a70b3f012e81a27166a94a9e4582496d29f0a8277bbc57b024c37f4dca0329b8461347eec004357227597
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

PAYMENT SWIFT COPY PRINTOUT.exe

.exe 674KB

PAYMENT SWIFT COPY PRINTOUT.exe

SHA256 895bd4c8d2a48b22575765b56e28816dfec0a3ab991140a62cf76802c53a07bf
MD5 2d7d758e0772d8415c74f0e7a97e9f74
SHA1 c6ff996d07851a9ecc9d6b962ea0f588c1e6972b
SHA512 2cdcbd3b262831375e518d294772a3bcc14410cfeb8a70b3f012e81a27166a94a9e4582496d29f0a8277bbc57b024c37f4dca0329b8461347eec004357227597
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware