3232021_hades_rsw_4984662693543936[.]zip | Triage

Sharing

General

Target

3232021_hades_rsw_4984662693543936.zip
Size

1.8MB
MD5

10997bc7a7bf59f8041090d1a311263a
SHA1

e6c1f47546a2a171f1a5d645437a737b84384c59
SHA256

3ed8520133ace271da2ac9bf9655151d5c7b7d5507434900c7573fbd468a521f
SHA512

7ef99fee9b9e98b9f1e12f76a05a0d8e049d986cc244dd2fcc7254c89fb7b06aa94070ccec46a831130376a75345a23feda797d091044dd5034225191437d2a6

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs

Detects CryptOne packer defined in NCC blogpost.

cryptone packer

Processes:

resource	yara_rule
static1/unpack001/fe997a590a68d98f95ac0b6c994ba69c3b2ece9841277b7fecd9dfaa6f589a87	cryptone

Files

3232021_hades_rsw_4984662693543936.zip
.zip

Password: infected
fe997a590a68d98f95ac0b6c994ba69c3b2ece9841277b7fecd9dfaa6f589a87
.exe windows x64