DU0YWKqWYRdmotp[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DU0YWKqWYRdmotp.exe
Size 899KB
Sample201109-9kxrec5wex
SHA256 397dd4bc6657e428ed2b5d3bcf09d3409d943796cfe5d096583c85ff8a3340b1
MD5 3b53beee5f54bb4ad9b4d35e82b5ffd4
SHA1 1b6bc92c62176f001822fd909fe52014ab1d58e7
SHA512 a34e70dfbd167c9e285cfad54aa19e12f7a44cad58c68b2ca783155bcbb10a5f4827eb84dda3401094930d0eccb1687c20762ea4fab68401bdac17d97d1eeb28
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

DU0YWKqWYRdmotp.exe

.exe 899KB

DU0YWKqWYRdmotp.exe

SHA256 397dd4bc6657e428ed2b5d3bcf09d3409d943796cfe5d096583c85ff8a3340b1
MD5 3b53beee5f54bb4ad9b4d35e82b5ffd4
SHA1 1b6bc92c62176f001822fd909fe52014ab1d58e7
SHA512 a34e70dfbd167c9e285cfad54aa19e12f7a44cad58c68b2ca783155bcbb10a5f4827eb84dda3401094930d0eccb1687c20762ea4fab68401bdac17d97d1eeb28
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware