SecuriteInfo[.]com[.]Troj[.]Qbot-FS[.]13218[.]2878 | Triage

Sharing

General

Target

SecuriteInfo.com.Troj.Qbot-FS.13218.2878
Size

1.3MB
MD5

5753870132f5070fab94c532dbe5b104
SHA1

a8c3423205eeb6dd34acb984933aaf007ba77d51
SHA256

cc0e17c71ad98ad99e8cf36d2faa52b83a8137318932f6b6879dfb7d4431844c
SHA512

916d2cbd21128b70fa3ac1856737c0e976b24b202c991f08b9b109ee392102908bf6646441c763456e2ffbd2b793c6fdf3b0e027f9493ffe24ad46d4226f29c3

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs
Detects CryptOne packer defined in NCC blogpost.
cryptone packer

Processes:

resource yara_rule

sample cryptone

Files

SecuriteInfo.com.Troj.Qbot-FS.13218.2878
.exe windows x86