SecuriteInfo[.]com[.]Troj[.]Qbot-FS[.]6143[.]5758 | Triage

Sharing

General

Target

SecuriteInfo.com.Troj.Qbot-FS.6143.5758
Size

620KB
MD5

886beb1966688083790ce4ac416f7d0e
SHA1

034ddee16df78f90765f090e14d8f07c731785ac
SHA256

6833103ea9ce11c1a8deece38363ed984b60d736c9bf23f64fbb9ff9b8e6a8dc
SHA512

be5c89174640df30f5d247152d23ac66454becdddf6e672c2c2dc1744319cbf6dfbadc584926f9d7ffca598ffa479856c9e840b8ebd157f0e6107cc55e87072e

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs
Detects CryptOne packer defined in NCC blogpost.
cryptone packer

Processes:

resource yara_rule

sample cryptone

Files

SecuriteInfo.com.Troj.Qbot-FS.6143.5758
.exe windows x86