General

  • Target

    coba.exe

  • Size

    208KB

  • MD5

    21f7101edb9f28d281844455f23ea62d

  • SHA1

    57c28debae6c9562766c230698e5cd59c8b5a4c5

  • SHA256

    0ec278df12215701d1c1a31b797ffcc7cc25f04d9e563e48bea600b3397b40b2

  • SHA512

    841745a60eb8e16828696ab4d234b9d105d122b0c26304ab0eda4f178d77ceb7a00a1d3ba17286a12ecfea55706c7837dcd639a3628b36e42481671f5051a9a1

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

Files

  • coba.exe
    .zip

    Password: infected

  • QblbClNi[1].php
    .exe windows x86