General

  • Target
    f6d3b138c95a17efe81c0b04539eccbb5a65b480ea0a0484faf8a6c3dccc671a
  • Size 908KB
  • Sample220524-vg12ssacd5
  • SHA256 f6d3b138c95a17efe81c0b04539eccbb5a65b480ea0a0484faf8a6c3dccc671a
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

File Explorer

  • f6d3b138c95a17efe81c0b04539eccbb5a65b480ea0a0484faf8a6c3dccc671a
    .exe 908KB

f6d3b138c95a17efe81c0b04539eccbb5a65b480ea0a0484faf8a6c3dccc671a

  • IMPHASH c5f844dd8f82b6eb605d542b82a73b98
  • SHA256 f6d3b138c95a17efe81c0b04539eccbb5a65b480ea0a0484faf8a6c3dccc671a
  • MD5 SHA1 SHA512 SSDEEP
  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

PE Signature issue

Digest
34:2d:9c:c4:6c:2a:85:f9:55:0e:44:9d:ca:cc:f0:b3:82:b8:ca:c7
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
Major OS version
Entry point
106880
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths