General

  • Target

    a1388cb3e6ae68a6130ae12f9db4881238c97718875a3362b6bc5788e61c6663.zip

  • Size

    181KB

  • MD5

    e86b9fc13bdec54c63cb83b662de1b9f

  • SHA1

    faf8fb1f11bc445b38f275561221e697b84a8394

  • SHA256

    7f402727ef573c5129942b76944827de00f12453f537c592caf84e5430fa328e

  • SHA512

    824b97d0322e67380b2e8d6d3d570cfe92315a3541ce4648154831fd9acec2732fa1126a985b1ca7ad6f9d7fed85e94c8c0b5feb356d4de286167a6f24bc9692

  • SSDEEP

    3072:XzQP2YSL8Xd1nptQ2+8x1f83Yru1VwS2yFrw1kUzNDpw5gGHhAWsjWuji+VUI:jK2TSbpS2+sk3YK1Vr2dkURpHMVcWKiw

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

Files

  • a1388cb3e6ae68a6130ae12f9db4881238c97718875a3362b6bc5788e61c6663.zip
    .zip

    Password: infected

  • a1388cb3e6ae68a6130ae12f9db4881238c97718875a3362b6bc5788e61c6663.exe
    .exe windows x86

    Password: infected

    67afc3d7f748518bc69e619e8576d6f5


    Code Sign

    Headers

    Imports

    Sections