Overview

overview

10

Static

static

10

15d2c75abd...a6.exe

windows7-x64

10

15d2c75abd...a6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    15d2c75abda9b5c716268ecdc16feaa6.exe

  • Size

    112KB

  • MD5

    15d2c75abda9b5c716268ecdc16feaa6

  • SHA1

    9a71fb2e92124997274fe9cd4c18b5aa20083d92

  • SHA256

    7336f458f1c01884b699338576756bf2461706b044eaa056a6302b7e842f63b3

  • SHA512

    6e63fadf4ddecfb1efcba177a9ca617311a88edee3689a8f53ebe15509036fb451e7059aabf2e1cfc8d0c81b4f7b50d6f7597efef4c2cad889c5a02fb4f5f35b

  • SSDEEP

    1536:JxqjQ+P04wsmJCgPyOMb+KR0Nc8QsJq31TT6NerLhbkfltpMD4BQKq:sr85CgPHe0Nc8QsCkNC2vQ48

Score
10/10
neshtametasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

156.223.59.18:4444

Signatures

  • Detect Neshta payload 1 IoCs
  • Metasploit family
    metasploit
  • Neshta family
    neshta
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15d2c75abda9b5c716268ecdc16feaa6.exe
    .exe windows x86


    Headers

    Sections