PO No SCI6533155 SZ Quote ID SZ-761100-44[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PO No SCI6533155 SZ Quote ID SZ-761100-44.exe
Size 432KB
Sample201109-talezndame
SHA256 cb7d8b2d1f4a601cb1049096cddaa18bac0efb2b956f9e1b98276be2618fcaf5
MD5 c6459d07f19b52a02f114686de9d768b
SHA1 4dd940b26624c8f9fb113c9e4027f47e53fcfa99
SHA512 56cccb5f5f705be0de9b177d55c914931d2cd057f3ba59f5d8f2e7cbd3f63ff4e078c43970ef5bdffe1443dcd624bbe83d397dcf5ec56b8f643dda361cce6a96
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

PO No SCI6533155 SZ Quote ID SZ-761100-44.exe

.exe 432KB

PO No SCI6533155 SZ Quote ID SZ-761100-44.exe

SHA256 cb7d8b2d1f4a601cb1049096cddaa18bac0efb2b956f9e1b98276be2618fcaf5
MD5 c6459d07f19b52a02f114686de9d768b
SHA1 4dd940b26624c8f9fb113c9e4027f47e53fcfa99
SHA512 56cccb5f5f705be0de9b177d55c914931d2cd057f3ba59f5d8f2e7cbd3f63ff4e078c43970ef5bdffe1443dcd624bbe83d397dcf5ec56b8f643dda361cce6a96
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.