New Order[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
New Order.exe
Size 778KB
Sample210205-3fvxaz2smx
SHA256 bc8df1915282e2e0682f70a348b91aab8282560beee4fd5f7b972cbc8240993a
MD5 2caebdfc35a2ee45de146ff816a682c6
SHA1 74cb36296951e7910d5c730c7bbbcb6648598ca5
SHA512 6a6f477c33bb5cb74aad9e6968e67b6caa52669f3939bdbbaef9b8181a25879775a29b622f4da92050546870a0aec7c7761acfd5a89e6f9971b05cf351066e8b
MD5 SHA1 SHA512

Score

9^/10

Malware Config

Signatures

Beds Protector Packer 1 IoCs

Detects Beds Protector packer used to load .NET malware.

resource	yara_rule
sample	beds_protector

File Explorer

New Order.exe

.exe 778KB

New Order.exe

SHA256 bc8df1915282e2e0682f70a348b91aab8282560beee4fd5f7b972cbc8240993a
MD5 2caebdfc35a2ee45de146ff816a682c6
SHA1 74cb36296951e7910d5c730c7bbbcb6648598ca5
SHA512 6a6f477c33bb5cb74aad9e6968e67b6caa52669f3939bdbbaef9b8181a25879775a29b622f4da92050546870a0aec7c7761acfd5a89e6f9971b05cf351066e8b
MD5 SHA1 SHA512

windows x86

Beds Protector Packer

Detects Beds Protector packer used to load .NET malware.