SecuriteInfo[.]com[.]Trojan[.]Heur[.]FU[.]Cq2@aemIZRhi[.]5884[.]3695 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
[email protected]
Size 448KB
Sample201109-v4dm2bvb32
SHA256 111b64c8b5e23bf8980e1f9151f87132b1250f3c48df1106d3b2f0e0808830d8
MD5 3b2c9319b2059025f85336120546ab88
SHA1 e44d63d9fabc9b4c3a8aebb128cf96b5282a055e
SHA512 fc83d19285cc50d9d5c3f2ada54014e39a4e9c17b8051e00c70f56b9696e0bf5ef84c24966c58142a11a596b29567bd7dac2efcfb19dc812d3cc2a1eb3d99422
MD5 SHA1 SHA512

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs

Detects CryptOne packer defined in NCC blogpost.

cryptone packer

resource	yara_rule
sample	cryptone

File Explorer

[email protected]

.exe 448KB

[email protected]

SHA256 111b64c8b5e23bf8980e1f9151f87132b1250f3c48df1106d3b2f0e0808830d8
MD5 3b2c9319b2059025f85336120546ab88
SHA1 e44d63d9fabc9b4c3a8aebb128cf96b5282a055e
SHA512 fc83d19285cc50d9d5c3f2ada54014e39a4e9c17b8051e00c70f56b9696e0bf5ef84c24966c58142a11a596b29567bd7dac2efcfb19dc812d3cc2a1eb3d99422
MD5 SHA1 SHA512

windows x86

CryptOne packer

Detects CryptOne packer defined in NCC blogpost.

cryptone packer