PURCHASE ORDER AND SPECIFICATIONS[.][.][.]scanned[.][.][.]pif[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PURCHASE ORDER AND SPECIFICATIONS...scanned...pif.exe
Size 429KB
Sample201109-cp874mgx2e
SHA256 5a07f2f6d957bef6de06f48eb20ce3ac1cbaaf4ea0ec748e95d14f9bbf5d7e28
MD5 3b7c9374d28345df34dd17a3e194ac37
SHA1 dab70c5cbae16621ca2ecb44e318fd9c5679d2f0
SHA512 912a11e0919a87968ec89156e5536b6c906a32c9d3c0bf191f8814196b4de9c283cf427eb0ee8ac48bef1727c14ac13bed4733bca7a77d0c2af79a451aea5bb8
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

PURCHASE ORDER AND SPECIFICATIONS...scanned...pif.exe

.exe 429KB

PURCHASE ORDER AND SPECIFICATIONS...scanned...pif.exe

SHA256 5a07f2f6d957bef6de06f48eb20ce3ac1cbaaf4ea0ec748e95d14f9bbf5d7e28
MD5 3b7c9374d28345df34dd17a3e194ac37
SHA1 dab70c5cbae16621ca2ecb44e318fd9c5679d2f0
SHA512 912a11e0919a87968ec89156e5536b6c906a32c9d3c0bf191f8814196b4de9c283cf427eb0ee8ac48bef1727c14ac13bed4733bca7a77d0c2af79a451aea5bb8
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.