DEMAND QUOTE Mr Steve[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
DEMAND QUOTE Mr Steve.exe
Size 399KB
Sample201109-wbb4jbfsze
SHA256 9ebc53c7c3ea8d2540a12a1f49fe2f7bd026d468edd9fedeff57d39079d9d29e
MD5 9f55d18b8ea938f88c7c0c8f5bc76211
SHA1 5863bd301f81715d5c6adedc0aa6b30c5b52d6e4
SHA512 1b10a5b9f4cf71b67a23842c87f2c50dc764428882728a5645eb1a99c8de5e79488f95de0d0f4aa17e17e5029c3f35ec9544a3c69363759f80dcd85e595e533a
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

CoreCCC Packer 1 IoCs

Detects CoreCCC packer used to load .NET malware.

resource	yara_rule
sample	coreccc

File Explorer

DEMAND QUOTE Mr Steve.exe

.exe 399KB

DEMAND QUOTE Mr Steve.exe

SHA256 9ebc53c7c3ea8d2540a12a1f49fe2f7bd026d468edd9fedeff57d39079d9d29e
MD5 9f55d18b8ea938f88c7c0c8f5bc76211
SHA1 5863bd301f81715d5c6adedc0aa6b30c5b52d6e4
SHA512 1b10a5b9f4cf71b67a23842c87f2c50dc764428882728a5645eb1a99c8de5e79488f95de0d0f4aa17e17e5029c3f35ec9544a3c69363759f80dcd85e595e533a
MD5 SHA1 SHA512

windows x86

CoreCCC Packer

Detects CoreCCC packer used to load .NET malware.