250617-sly2wsesjf_pw_infected[.]zip

General

Target
250617-sly2wsesjf_pw_infected.zip
Size 68KB
Sample250620-e4s2psbl71
SHA256 74d81c9744903ec860c96aa2140bae80dc09ad47d9cbd0fa634afe5f5b57a988
MD5 b845fdefde1a2a1452c072526c6226b6
SHA1 ec04d893e6fa2c380a23c51cdb48ca65d8c8c9e3
SHA512 719569b9909d6d9f9e47d95b3b9fa8cfc23ac5de3f5eb6fcce34021874fb13d870c69703993edf3e176a46dcfcd172f7c0f814bfcf0e671bf4601c68c33c9a6f
SSDEEP 1536:dficHphK/2tgWaa+nDj5PCGbHjcsNaHk4T5Yes2EJP5S2OeM:dacHpo/Agba+5P5PcsIHk2Ges7SHeM
MD5 SHA1 SHA512 SSDEEP

Score

9^/10

cryptone packer

Malware Config

Signatures

CryptOne packer 1 IoCs

Detects CryptOne packer defined in NCC blogpost.

cryptone packer

resource	yara_rule
static1/unpack001/3228e5b91d747c15a3ad65e142a2e22a76439584cdaf75e85cb51822ea01d6e4	cryptone

File Explorer

250617-sly2wsesjf_pw_infected.zip

.zip 68KB
3228e5b91d747c15a3ad65e142a2e22a76439584cdaf75e85cb51822ea01d6e4

.exe 1.2MB

250617-sly2wsesjf_pw_infected.zip

SHA256 74d81c9744903ec860c96aa2140bae80dc09ad47d9cbd0fa634afe5f5b57a988
MD5 b845fdefde1a2a1452c072526c6226b6
SHA1 ec04d893e6fa2c380a23c51cdb48ca65d8c8c9e3
SHA512 719569b9909d6d9f9e47d95b3b9fa8cfc23ac5de3f5eb6fcce34021874fb13d870c69703993edf3e176a46dcfcd172f7c0f814bfcf0e671bf4601c68c33c9a6f
SSDEEP 1536:dficHphK/2tgWaa+nDj5PCGbHjcsNaHk4T5Yes2EJP5S2OeM:dacHpo/Agba+5P5PcsIHk2Ges7SHeM
MD5 SHA1 SHA512 SSDEEP

Password

infected

3228e5b91d747c15a3ad65e142a2e22a76439584cdaf75e85cb51822ea01d6e4

IMPHASH 09c4d73af3796a3e85e763e475143c5d
SHA256 3228e5b91d747c15a3ad65e142a2e22a76439584cdaf75e85cb51822ea01d6e4
MD5 729cf41bcba0d5f794c4dbed884862ed
SHA1 1ef5d3ccc1aa1f06da71705f0f87a9c9132ab2c7
SHA512 f3576548c8d40f0a9570023ffc4cfe57767c0600132a97643d81f24f46dcb78514f508e0a8153bc77dfea85304e79ecad39c167f78dde4cccafebc51b78b5bf6
SSDEEP 1536:K9re6vuRlCiJAc8Siquv40MoypyWwgId0T1k6PbkQj3f94ENV:K9buRdAcgqu4lAp6kQrf94y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

CryptOne packer

Detects CryptOne packer defined in NCC blogpost.

cryptone packer

Password

infected

PE Signature issue

Digest

f4:da:2d:2a:3a:fe:ed:88:21:79:82:38:85:ac:56:f3:86:da:52:94

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

0

Major OS version

4

Entry point

9248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

250617-sly2wsesjf_pw_infected.zip

3228e5b91d747c15a3ad65e142a2e22a76439584cdaf75e85cb51822ea01d6e4

PE Signature issue

kernel32

user32

gdi32

generic

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

250617-sly2wsesjf_pw_infected.zip

3228e5b91d747c15a3ad65e142a2e22a76439584cdaf75e85cb51822ea01d6e4

PE Signature issue

kernel32

user32

gdi32

generic