0c0d8b06a7d7137825e38f43e21404cda81293a4b337690e45114bcfe5847b41
- SHA256 0c0d8b06a7d7137825e38f43e21404cda81293a4b337690e45114bcfe5847b41
Static task
static1
Behavioral task
behavioral1
Sample
MASSBILL.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
MASSBILL.exe
Resource
win10v2004-en-20220112
Detects Beds Protector packer used to load .NET malware.
| resource | yara_rule |
|---|---|
| static1/unpack001/MASSBILL.exe | beds_protector |
Beds Protector Packer
Detects Beds Protector packer used to load .NET malware.