SecuriteInfo[.]com[.]Troj[.]Qbot-FS[.]676[.]30025 | Triage

Sharing

General

Target

SecuriteInfo.com.Troj.Qbot-FS.676.30025
Size

1.2MB
MD5

b52346c944e3d8e1fe9abb220f8f0569
SHA1

b793bcfef185483835efd409d81f3b990c6f176e
SHA256

ba6ded55cdc59716506edd0454c47192a9401508b121c546b36763b8147182a9
SHA512

b0080dacc1ad92e646481f4b367ebf5b1004ddbd546b13bba8d727c630e31a5753e3931bbbdeaea868ac6c88bf0fa6b63176d61057d8e239dcd1a4677ed20c72

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs
Detects CryptOne packer defined in NCC blogpost.
cryptone packer

Processes:

resource yara_rule

sample cryptone

Files

SecuriteInfo.com.Troj.Qbot-FS.676.30025
.exe windows x86