5d8574097e8b51fc753926a2bc664a80N[.]exe

General

Target
5d8574097e8b51fc753926a2bc664a80N.exe
Size 5.7MB
Sample240907-d2dcsssfnj
SHA256 6b8c4f94cfb09ebe365c1db4ba45404039d860d0bbe61395eef6dd5929ca4f30
MD5 5d8574097e8b51fc753926a2bc664a80
SHA1 291f81cf6f058202a7d7ef58ca4a2d28b6b9c547
SHA512 a640efb8fd171c769fdd0396dbba307c443550481db8b79076fa5996a8b65ce4cba2441136b3ed3a7be2e000b696fa9e677701f5de674412226f67c1869e1e4b
SSDEEP 6144:K4thSUHz9HRg1c5Fm0Dq7VTu0Cdvm2MU3Iv7HCuqBl9scWBJy:hh3Hz9HeWFJDmV61AXuu6D
MD5 SHA1 SHA512 SSDEEP

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs

Detects CryptOne packer defined in NCC blogpost.

cryptone packer

resource	yara_rule
sample	cryptone

File Explorer

5d8574097e8b51fc753926a2bc664a80N.exe

.exe 5.7MB

5d8574097e8b51fc753926a2bc664a80N.exe

IMPHASH 9a78c76417431884c38d6c29ae212b7b
SHA256 6b8c4f94cfb09ebe365c1db4ba45404039d860d0bbe61395eef6dd5929ca4f30
MD5 5d8574097e8b51fc753926a2bc664a80
SHA1 291f81cf6f058202a7d7ef58ca4a2d28b6b9c547
SHA512 a640efb8fd171c769fdd0396dbba307c443550481db8b79076fa5996a8b65ce4cba2441136b3ed3a7be2e000b696fa9e677701f5de674412226f67c1869e1e4b
SSDEEP 6144:K4thSUHz9HRg1c5Fm0Dq7VTu0Cdvm2MU3Iv7HCuqBl9scWBJy:hh3Hz9HeWFJDmV61AXuu6D
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

CryptOne packer

Detects CryptOne packer defined in NCC blogpost.

cryptone packer

PE Signature issue

Digest

01:b8:60:a0:e3:ce:73:1c:c5:5b:bc:75:af:b7:a0:b6:19:0f:29:fd

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=IACUFWWMAYLTPQZAUK

Chains

Sep 6, 2024

Minor OS version

0

Major OS version

5

Entry point

6016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LoadLibraryA GetProcAddress Sleep GetModuleHandleW VirtualAllocEx CloseHandle TerminateProcess OpenProcess GetTempPathA LoadLibraryW GetLastError SetLastError MapViewOfFile IsDebuggerPresent UnhandledExceptionFilter GetCurrentProcess GetCurrentThreadId SetUnhandledExceptionFilter GetStartupInfoW InterlockedExchange GetVersion AreFileApisANSI GetSystemTime LocalFree GetCurrentProcessId DeleteFileW GetVersionExA OutputDebugStringA DeleteCriticalSection GetFileAttributesExW GetSystemInfo GetDiskFreeSpaceA CreateFileMappingW CreateFileMappingA GetDiskFreeSpaceW EnterCriticalSection LockFileEx HeapSize GetTempPathW FlushFileBuffers MultiByteToWideChar CreateFileW ReadFile HeapValidate HeapCreate LeaveCriticalSection HeapDestroy FormatMessageW WideCharToMultiByte InitializeCriticalSection WriteFile FormatMessageA GetSystemTimeAsFileTime GetProcessHeap UnlockFileEx OutputDebugStringW LockFile UnlockFile InterlockedCompareExchange WaitForSingleObject HeapFree QueryPerformanceCounter SystemTimeToFileTime HeapAlloc SetEndOfFile UnmapViewOfFile GetModuleFileNameW SetFilePointer CreateMutexW GetFileSize CreateFileA HeapReAlloc GetFullPathNameA GetFullPathNameW GetTickCount GetSystemDirectoryA GetFileAttributesW GetFileAttributesA MoveFileExA DeleteFileA FreeLibrary GetCommandLineW

user32

LoadIconA LoadCursorA

gdi32

GetEnhMetaFileBits GetStockObject

advapi32

RegOpenKeyA RegQueryValueExA GetUserNameA

Sharing