Overview

overview

9

Static

static

9

541f9d3b8a...2e.exe

windows7-x64

1

541f9d3b8a...2e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1f4e5b1fee87e3f5c9a9acab413ac2e.bin

  • Size

    14.7MB

  • MD5

    680e005ce1d7b9817feb270e1951253b

  • SHA1

    87e21954819b163c85881a113ee31c384844c62a

  • SHA256

    2d97f74db917842db3751a7a7f5ea98428cb8ecc482b61e9e35525e9f869d95f

  • SHA512

    55ad3cbc068bf1b2ab2fe1b6f9e50bf121f68f9a8906a7d70036ce6fe735d500b11464b1cee903aa62c05b2f54ee7a597524804143f6e055d74370eb2cab1117

  • SSDEEP

    393216:Zvj3Tgw8oRtz7l/rk8N4ie+EKlwQIpLldxi1Sx:Zztx/V6H+9M7daSx

Score
9/10
coreentity

Malware Config

Signatures

  • CoreEntity .NET Packer 1 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

    coreentity
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f1f4e5b1fee87e3f5c9a9acab413ac2e.bin
    .zip

    Password: infected

  • 541f9d3b8a2c1909a22ded581a042b92bfe9688f19887853c6d363823baa522e.bin
    .exe windows x64

    Password: infected

    6dbf27f4c70fe2c8ed3e0122ba75d641


    Headers

    Imports

    Sections