SecuriteInfo[.]com[.]Troj[.]Qbot-FS[.]19822[.]1181 | Triage

Sharing

General

Target

SecuriteInfo.com.Troj.Qbot-FS.19822.1181
Size

620KB
MD5

377a9b356f6e80ec29083be9f5b8f74f
SHA1

e69d5175c3db1190927f680eb4173b2abd64fa19
SHA256

da97d22eb7016e9daa46962d9c6eb47d9227ad534a996531b793cd00f71b36a0
SHA512

31c4a38c48f85e48b87bfb0fcb557ee5305227ec4e1f5690291800dfa79839a143642eb126b24574c504848f52c43c806124fc14ea7cfe920f35dc0d4bfad60e

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs
Detects CryptOne packer defined in NCC blogpost.
cryptone packer

Processes:

resource yara_rule

sample cryptone

Files

SecuriteInfo.com.Troj.Qbot-FS.19822.1181
.exe windows x86