USD cSWIFT c_SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
USD cSWIFT c_SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679.exe
Size 424KB
Sample201109-pccgvx2tes
SHA256 ba4587bb7fef7fe60afcde3742183472840eaf7ef122669ae3f94eaad245fd7f
MD5 8643e31274a2766b0263166c854217e2
SHA1 e9df18bdc355c715692edfe91f4e700c48a88310
SHA512 22354b1c90678cfbab2f800724c6d1b8f6618d417249dfcbd47261bfd2f94a82048539e13f8995d241c314cbb4f663a3b3b719571a3a8126e12c49952f0fe190
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

USD cSWIFT c_SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679.exe

.exe 424KB

USD cSWIFT c_SCAN TT 190617_2019-NLCIV000003576_ES146009_30309679.exe

SHA256 ba4587bb7fef7fe60afcde3742183472840eaf7ef122669ae3f94eaad245fd7f
MD5 8643e31274a2766b0263166c854217e2
SHA1 e9df18bdc355c715692edfe91f4e700c48a88310
SHA512 22354b1c90678cfbab2f800724c6d1b8f6618d417249dfcbd47261bfd2f94a82048539e13f8995d241c314cbb4f663a3b3b719571a3a8126e12c49952f0fe190
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.