29138cb2b30e6f05bcb0144617f9f563[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
29138cb2b30e6f05bcb0144617f9f563.exe
Size 418KB
Sample201109-kfr4yf8b1a
SHA256 d91e63352fd7d6d2d9f0f547cead82dff81cf5586540d65429a7b9e1fa13a15f
MD5 29138cb2b30e6f05bcb0144617f9f563
SHA1 3477b9a46552ee11e3395aad936d6d6145f2632c
SHA512 2183fdceeb0c01829350645777d19e58c3a107e497bd42574f0be661f10496ee3fbf51b92f76ae6060ab5d3d2e48fbd83aaf8933b1de3579d7da24488a00c699
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

29138cb2b30e6f05bcb0144617f9f563.exe

.exe 418KB

29138cb2b30e6f05bcb0144617f9f563.exe

SHA256 d91e63352fd7d6d2d9f0f547cead82dff81cf5586540d65429a7b9e1fa13a15f
MD5 29138cb2b30e6f05bcb0144617f9f563
SHA1 3477b9a46552ee11e3395aad936d6d6145f2632c
SHA512 2183fdceeb0c01829350645777d19e58c3a107e497bd42574f0be661f10496ee3fbf51b92f76ae6060ab5d3d2e48fbd83aaf8933b1de3579d7da24488a00c699
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware