General

  • Target

    4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8

  • Size

    844KB

  • MD5

    3dfc20d3780cb61f0654ef3116bdc8bb

  • SHA1

    5efe6acfb7e80c23f5734b020578f032342fc77d

  • SHA256

    4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8

  • SHA512

    227904c9efe3ded15599ab1a555aee56721fc0059a0c8b4c42dee5c8c6208434b4ed72c0d878c98c21fec0695569e98fb99fb4781f88fa3eca7256bb560abd90

  • SSDEEP

    12288:gA+QuYAS3W3eV5ZqFfbIKGgiNz4rYL3h+AjZWQcpWFYK9751tjxE88888888888G:gAXuYAS31dSdozV3h+Ajsg97L

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b792c505b6dedad9f2a21c866212e96ae12c8415e3e9b249fa235e63398c2c8
    .exe windows x64

    98ac29c70e65697dcc8984b912a522a1


    Headers

    Imports

    Sections