Purchase Order #40701[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Purchase Order #40701.exe
Size 424KB
Sample201109-8cr3df5j7e
SHA256 e4bdbc72938f14ea66de9620b653a03bcd0b4c6b3a3b6bd7335ef15872dfb7cd
MD5 03b06b1830c18647d4ef902ce5f3c7e0
SHA1 cb2299b2f826a9c368f4bc6a7310d76ff870757e
SHA512 8805448ab82fdfe16a81bc0d4d2e5cae2d4a9c3d216849aa859682c32140bee02b7c3f072e1588f3e2962d0388e67888d82e98035c4e4d05cf20486724f9c0d9
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

Purchase Order #40701.exe

.exe 424KB

Purchase Order #40701.exe

SHA256 e4bdbc72938f14ea66de9620b653a03bcd0b4c6b3a3b6bd7335ef15872dfb7cd
MD5 03b06b1830c18647d4ef902ce5f3c7e0
SHA1 cb2299b2f826a9c368f4bc6a7310d76ff870757e
SHA512 8805448ab82fdfe16a81bc0d4d2e5cae2d4a9c3d216849aa859682c32140bee02b7c3f072e1588f3e2962d0388e67888d82e98035c4e4d05cf20486724f9c0d9
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.