Overview

overview

10

Static

static

9

AHF PO 000...DF.exe

windows7_x64

10

AHF PO 000...DF.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc5e3bcf40112d3c02ea2ff40593239058317103e208bf18bf869447387c2b4e

  • Size

    407KB

  • MD5

    5fcd20c44d19aa9ba305616313968e09

  • SHA1

    5c5fcde8967315875d173b04aa10fdaabf660b44

  • SHA256

    fc5e3bcf40112d3c02ea2ff40593239058317103e208bf18bf869447387c2b4e

  • SHA512

    80a28ef1b6177523341c3a5e577c271268cb3c8b5c15fa19da1874c23db5aa2be0adad1116fe52df4a59c2bbcd17730666784e94e642f162353815962af3e483

  • SSDEEP

    6144:Obv0HSHJruFV3lFcxyZReartD4jMwjrh5e2xcU1+0bnhGzcX0zc07E5I3+Xwg1Xy:ObvOaruFVfc8ZRNF4jjjrh5vxL70AkT/

Score
9/10

Malware Config

Signatures

  • CoreCCC Packer 1 IoCs

    Detects CoreCCC packer used to load .NET malware.

Files

  • fc5e3bcf40112d3c02ea2ff40593239058317103e208bf18bf869447387c2b4e
    .zip
  • AHF PO 00035440PDF.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections