General

  • Target
    06b007e9b86cfa9faa67f05a06b20247c63fa04d9835ffababc25da6ffada936
  • Size 908KB
  • Sample220524-vcw72sdham
  • SHA256 06b007e9b86cfa9faa67f05a06b20247c63fa04d9835ffababc25da6ffada936
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

File Explorer

  • 06b007e9b86cfa9faa67f05a06b20247c63fa04d9835ffababc25da6ffada936
    .exe 908KB

06b007e9b86cfa9faa67f05a06b20247c63fa04d9835ffababc25da6ffada936

  • IMPHASH c5f844dd8f82b6eb605d542b82a73b98
  • SHA256 06b007e9b86cfa9faa67f05a06b20247c63fa04d9835ffababc25da6ffada936
  • MD5 SHA1 SHA512 SSDEEP
  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

PE Signature issue

Digest
5d:c7:44:c7:6d:42:f1:85:dc:1e:66:40:bb:d7:af:16:ef:13:4b:49
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
Major OS version
Entry point
106880
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths