PAYMENT SWIFT COPY PRINTOUT[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PAYMENT SWIFT COPY PRINTOUT.exe
Size 717KB
Sample201109-qrplvcfkte
SHA256 868f1b45e31dafa602f728c0f508293c4cae79b013e3e36edbe8d81c33a5bbe3
MD5 ab5b737ee271f070bbdecd8da4a9b4a2
SHA1 ff822894ea3595bb8ec8b372e8cdde39f37a16bc
SHA512 d1acebb039480ada9512a05b92c796f1e83fd45a438d2e11c93da6ea3a217f248383912c1a3df07dc244fa72cd698a995c3cd009ad31afc1e3968f40395e34a2
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

PAYMENT SWIFT COPY PRINTOUT.exe

.exe 717KB

PAYMENT SWIFT COPY PRINTOUT.exe

SHA256 868f1b45e31dafa602f728c0f508293c4cae79b013e3e36edbe8d81c33a5bbe3
MD5 ab5b737ee271f070bbdecd8da4a9b4a2
SHA1 ff822894ea3595bb8ec8b372e8cdde39f37a16bc
SHA512 d1acebb039480ada9512a05b92c796f1e83fd45a438d2e11c93da6ea3a217f248383912c1a3df07dc244fa72cd698a995c3cd009ad31afc1e3968f40395e34a2
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.