General

  • Target

    Zeppelinbggaehbcdj14_browsingExe.exe

  • Size

    257KB

  • MD5

    f66b738e1bfe1f8aab510abed850c424

  • SHA1

    571f50fee0acad1da39fe06c75116461800cc719

  • SHA256

    faa79c796c27b11c4f007023e50509662eac4bca99a71b26a9122c260abfb3c6

  • SHA512

    dd8b63631b23a18f062e64c5e719ead52075964a2e465dfc2663425c97f0030ced80b6e48fdc84d54b2b8fb42513a9c9d0a60763eb2feca9f89c900b5bdcb97f

  • SSDEEP

    6144:k957WWlJmcyfwAPWna4DQFu/U3buRKlemZ9DnGAevIGZi+YyJE1yR:O7WWKvhPWa4DQFu/U3buRKlemZ9DnGAy

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Detects Zeppelin payload 1 IoCs
  • Neshta family
  • Zeppelin family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Zeppelinbggaehbcdj14_browsingExe.exe
    .exe windows x86


    Headers

    Sections