Cópia de pagamento_0100188654_10062020[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Cópia de pagamento_0100188654_10062020.exe
Size 520KB
Sample201109-d7lr5hflqx
SHA256 4fc7415e4a84d6645a11260c1da7e68ed8a6a2a941cd706fc7060912ba4721ed
MD5 e74b8cea8fb9fe201f8235df4da3a99e
SHA1 0363872053a55f952dd3a31ec4652a8a6349e39f
SHA512 e6b5e6c1b47af43a2a222b6737db913ae4f639a4bbfd0a5c32357c6802f8d0f267cb3c56e3057ff02af779f3f303be65e07f58c94f8a54ea134541ecb3af8ce3
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

Cópia de pagamento_0100188654_10062020.exe

.exe 520KB

Cópia de pagamento_0100188654_10062020.exe

SHA256 4fc7415e4a84d6645a11260c1da7e68ed8a6a2a941cd706fc7060912ba4721ed
MD5 e74b8cea8fb9fe201f8235df4da3a99e
SHA1 0363872053a55f952dd3a31ec4652a8a6349e39f
SHA512 e6b5e6c1b47af43a2a222b6737db913ae4f639a4bbfd0a5c32357c6802f8d0f267cb3c56e3057ff02af779f3f303be65e07f58c94f8a54ea134541ecb3af8ce3
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware