Overview

overview

10

Static

static

9

retrohunt_...ac.exe

windows7-x64

10

retrohunt_...ac.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    retrohunt_586eb933e2123d683f8ce8da2aece5a2094dca72be0a1ded18210c12351451ac
  • Size 2.6MB
  • Sample230830-s2wayagd39
  • SHA256 586eb933e2123d683f8ce8da2aece5a2094dca72be0a1ded18210c12351451ac
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10
cryptonepacker

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

File Explorer

  • retrohunt_586eb933e2123d683f8ce8da2aece5a2094dca72be0a1ded18210c12351451ac
    .exe 2.6MB

retrohunt_586eb933e2123d683f8ce8da2aece5a2094dca72be0a1ded18210c12351451ac

  • IMPHASH 829e83c1d2d988349a749b806aa9cfef
  • SHA256 586eb933e2123d683f8ce8da2aece5a2094dca72be0a1ded18210c12351451ac
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • CryptOne packer

    Detects CryptOne packer defined in NCC blogpost.

    cryptonepacker

PE Signature issue

Digest
be:ff:69:40:9d:d7:a1:f9:b4:12:a5:29:5d:e2:95:ec:06:b6:32:3a
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=BJFUVOTKKGVSSQLTLY
Chains

Aug 30, 2023

Minor OS version
Major OS version
Entry point
5408
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths