Overview

overview

10

Static

static

10

SouthPark_TFBW.exe

windows7_x64

1

SouthPark_TFBW.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SouthPark_TFBW.exe

  • Size

    221.0MB

  • MD5

    15ea6ed6b5eecad1c7fe2724e23cae04

  • SHA1

    5b62f959871c49a71e4e5d238b651d6ecfef0be4

  • SHA256

    62f9387ad9055b005683d934271e5b7d511d2e202bb44a2d877a911568119f68

  • SHA512

    410c53744c911b49aefd33c9501bf6117e84a4b77cb87491165ecb08993d408b2188314afab9be912ed85de122918736dbd2206b0a710e9dd5b85809d00879fd

  • SSDEEP

    3145728:esFV8bN4rySg2X8/srGyadBvkYrB8TKVR9DkEDJ24bc19TaB1nw:H8Wy0XrOvkkBzDsK

Score
10/10
coreentity

Malware Config

Signatures

  • CoreEntity .NET Packer 1 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

    coreentity

Files

  • SouthPark_TFBW.exe
    .exe windows x64

    d79766625eb453066680ca095db392f2


    Headers

    Imports

    Sections