General

  • Target

    79a27e4a398b5567f6fe6ea11c9736304b00064825801bc0dec160de4423ecb9

  • Size

    3.5MB

  • MD5

    1f6c51836d4915ab26062792c3461f8e

  • SHA1

    9f4c079c82923b05f03e983ebc4d2d7249277fe4

  • SHA256

    79a27e4a398b5567f6fe6ea11c9736304b00064825801bc0dec160de4423ecb9

  • SHA512

    0fb93bcb8cd60801e49be3f1cd9a154ec14af0b0ed9b1c627530acc70413bde16c9b00aea8ec174655dc05f2b9ba8d0f1dc11a554a167ca57059f05120ba754d

  • SSDEEP

    49152:OhIQUPJ1WMVWxszjEflNnnv3HASULbE2eFhoY9pkRNVsJ5YV8WMn0JWlrGmQ6UI:1ax3lNnmE2mv9pkRNIlr

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79a27e4a398b5567f6fe6ea11c9736304b00064825801bc0dec160de4423ecb9
    .exe windows:5 windows x86

    c1c0149142054dac4085f1d3744c537f


    Headers

    Imports

    Sections