General

  • Target

    fe997a590a68d98f95ac0b6c994ba69c3b2ece9841277b7fecd9dfaa6f589a87.zip

  • Size

    1.7MB

  • MD5

    d746db2f8497bd5d1676f8bcaebab68d

  • SHA1

    9832f7fb1b79b198fb730b957ca95fa0f474e1f3

  • SHA256

    77453f03929d9483f4b5178f11234b47ccd83044c6e1c2006fad157ca616dddf

  • SHA512

    f18ee91b597876b7bb0074e7e4fcffc765389866822fcc3a0678fc6eae7c11f115a5a007525b18fc7873662e6047a4f19a05634ada2710a11ac61b692dd265e9

  • SSDEEP

    49152:HdSDu8cRyE3H0U/IWqqPs/6XeKSfwXIARelWFv5O9gz:9SDYnrtqqdYw1eo

Score
9/10

Malware Config

Signatures

  • CryptOne packer 1 IoCs

    Detects CryptOne packer defined in NCC blogpost.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fe997a590a68d98f95ac0b6c994ba69c3b2ece9841277b7fecd9dfaa6f589a87.zip
    .zip

    Password: infected

  • fe997a590a68d98f95ac0b6c994ba69c3b2ece9841277b7fecd9dfaa6f589a87.exe
    .exe windows:5 windows x64 arch:x64

    Password: infected

    7bb84c055e762f3b23509e70313814ed


    Headers

    Imports

    Sections