Overview

overview

10

Static

static

9

BOOKING 6x...df.exe

windows7_x64

10

BOOKING 6x...df.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cb2aac5524a46c2a394104d7b882b06f65ca95d62e39aa47f758e9708c4072c

  • Size

    513KB

  • MD5

    6cfd53e466cea9de8d510716bcf2641f

  • SHA1

    cffc8bc3df7471a7b72323cbf14898987093b932

  • SHA256

    6cb2aac5524a46c2a394104d7b882b06f65ca95d62e39aa47f758e9708c4072c

  • SHA512

    86c3f9d2cf50902763e75e00c3f9f9ee7f438f5328ef04e71c67ce8eaccc96c6b56b13da82285ccf650cff5d6b668b432d8b77a92423ae0247308d8551c4c6d2

  • SSDEEP

    12288:2Ob6tWNHX0AgvFUZ1v6dKUiZaGcIZrndU3Watb1g/w6:2NWdPgvFUHv5UiYGHnMtb1g/w6

Score
9/10

Malware Config

Signatures

  • CoreCCC Packer 1 IoCs

    Detects CoreCCC packer used to load .NET malware.

Files

  • 6cb2aac5524a46c2a394104d7b882b06f65ca95d62e39aa47f758e9708c4072c
    .zip
  • BOOKING 6x20' AGL.pdf.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections