General

  • Target

    9fa1ba3e7d6e32f240c790753cdaaf8e.bin

  • Size

    1.7MB

  • MD5

    9c94d56dbd7081d164318cad59408e0d

  • SHA1

    aa197b09a902482914a1039e45c8ff2664d77996

  • SHA256

    e5e978c87ca89c047d9337601024d729586b355566432c9d86bf34d858ad7b4c

  • SHA512

    d66f4831664ba417f4484a57d044171c18d6bc3c45a9360f4495021fcff6472b12faa2b9de4d6db8e072d2a592185900e58b6148407ee193b4ea93b745b164c9

  • SSDEEP

    49152:laPGjn1gLCHhkwgS9rA6v5QoY6tPMIPWw88s:lYGjnmMkwhrA64ErE8s

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9fa1ba3e7d6e32f240c790753cdaaf8e.bin
    .zip

    Password: infected

  • fe997a590a68d98f95ac0b6c994ba69c3b2ece9841277b7fecd9dfaa6f589a87.bin
    .exe windows:5 windows x64

    Password: infected

    7bb84c055e762f3b23509e70313814ed


    Headers

    Imports

    Sections