Inquiry[.]exe[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Inquiry.exe.exe
Size 395KB
Sample201109-vcphv53p9n
SHA256 df2bbdd833be8896f46c8660acfc9da2711f2a75d8338240b781fc6ee3964f9e
MD5 f5200d15a07bcc43ca60af2aa0052bd8
SHA1 139eeca2b690d57727baff58c7ca8a482f9b8ca6
SHA512 21c39125f9e12821f11ff10ebc3d53cf5d788459cd10125d99aec36aaaaa2901c31fef5fd60a006858393ef08df0d90a0c546c45e9af604f85025ebbd77d4b2f
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

ServiceHost packer 1 IoCs

Detects ServiceHost packer used for .NET malware

resource	yara_rule
sample	servicehost

File Explorer

Inquiry.exe.exe

.exe 395KB

Inquiry.exe.exe

SHA256 df2bbdd833be8896f46c8660acfc9da2711f2a75d8338240b781fc6ee3964f9e
MD5 f5200d15a07bcc43ca60af2aa0052bd8
SHA1 139eeca2b690d57727baff58c7ca8a482f9b8ca6
SHA512 21c39125f9e12821f11ff10ebc3d53cf5d788459cd10125d99aec36aaaaa2901c31fef5fd60a006858393ef08df0d90a0c546c45e9af604f85025ebbd77d4b2f
MD5 SHA1 SHA512

windows x86

ServiceHost packer

Detects ServiceHost packer used for .NET malware