090098899999[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
090098899999.exe
Size 501KB
Sample201109-bh52dsn32e
SHA256 23f373877f7e464405b857ef0c110f08a037d6750c3af4b60c16dc709b569c27
MD5 ffd5272f2497cc796019db487c142ea8
SHA1 48baa2173944e2e3876ef84cfa432d84f0040e27
SHA512 39bbda0b8be584d488eedf079ff916a7d76d67210033e0997abb52764f2d57c5d8167ea217b8b07fae54857ba453ad5f3fe863cb30ca2e9ad158c27b2fad4059
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

090098899999.exe

.exe 501KB

090098899999.exe

SHA256 23f373877f7e464405b857ef0c110f08a037d6750c3af4b60c16dc709b569c27
MD5 ffd5272f2497cc796019db487c142ea8
SHA1 48baa2173944e2e3876ef84cfa432d84f0040e27
SHA512 39bbda0b8be584d488eedf079ff916a7d76d67210033e0997abb52764f2d57c5d8167ea217b8b07fae54857ba453ad5f3fe863cb30ca2e9ad158c27b2fad4059
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware