GAC-PO of wire rope[.]xlsx[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
GAC-PO of wire rope.xlsx.exe
Size 698KB
Sample201109-b6c4bm4hee
SHA256 3ce06fdf5477c3138f03977f72703a45d01d18764116f95fd41c8a8c9adfbad2
MD5 47be6ef88e2253307b96d34aedf63ac3
SHA1 445db2cb344ea026de74bd73dfb52e81c73ed2e8
SHA512 91d79d0df15ecba2a5673b50e9494ffb64db9cbd83c53c83467b74e7454e78d0197e811f06418052925f03ccf0bbfcf55ca753f648fcaf6fda10b3a7ce2c9d62
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

GAC-PO of wire rope.xlsx.exe

.exe 698KB

GAC-PO of wire rope.xlsx.exe

SHA256 3ce06fdf5477c3138f03977f72703a45d01d18764116f95fd41c8a8c9adfbad2
MD5 47be6ef88e2253307b96d34aedf63ac3
SHA1 445db2cb344ea026de74bd73dfb52e81c73ed2e8
SHA512 91d79d0df15ecba2a5673b50e9494ffb64db9cbd83c53c83467b74e7454e78d0197e811f06418052925f03ccf0bbfcf55ca753f648fcaf6fda10b3a7ce2c9d62
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.