General

  • Target

    da95531ad63c4bb0ca614d392557dcce722ac12ef7795581ef805191840c3b98

  • Size

    181KB

  • MD5

    1bd6853709f8499ef6693efe3092a503

  • SHA1

    9bc79ab889a64305f3acfaaf9eb7ec1bd4827b78

  • SHA256

    da95531ad63c4bb0ca614d392557dcce722ac12ef7795581ef805191840c3b98

  • SHA512

    3119cb7b5c3d5cec6236601372eec0aa6c7bd2ede0994619b4cb9913fce712b5f6dbc95e14248608d4834360e55f31a5b9ab67be7c0f1030c541578e3ee42f08

  • SSDEEP

    3072:7xf1NMDqBeGUe83hwBMJtfmLyUEAqBQ1kHkNf5e/BIsj8gzqh8pvLl:7xTM+BeEMUyjBQ5I/usj8gzqhivB

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

Files

  • da95531ad63c4bb0ca614d392557dcce722ac12ef7795581ef805191840c3b98
    .zip

    Password: infected

  • a1388cb3e6ae68a6130ae12f9db4881238c97718875a3362b6bc5788e61c6663.exe
    .exe windows:2 windows x86 arch:x86

    67afc3d7f748518bc69e619e8576d6f5


    Code Sign

    Headers

    Imports

    Sections