Overview

overview

10

Static

static

10

DomainName.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DomainName.zip

  • Size

    98KB

  • MD5

    cea56583a631a661e52e48025bf24ea2

  • SHA1

    5b0bb61b6dee9736e374a54f7de6fcbc229828dc

  • SHA256

    01e0a5cc0c30dbdddec8320e4a3e1984ccb296d50021fbd73c26a4b7a17cae58

  • SHA512

    8fc299a87e144ca8ddbfc474055af54e4a3eb6e5c606ab8db1cf209cf64c556b4a4f5fcaa0f8eaa416a1ccf8eb664b75d68d9700c06d1ab695449cef406115c1

  • SSDEEP

    1536:4JrUR4fPKH5oTR6YO8fa9LxqBhFxay4XQM8vjn6lDHu0Eqhm0FC0E7QPSn5/6nBU:EXK29TO0aPUkNXf8LnqDO0EqbuwS8BlG

Score
10/10
neshtasodinokibi

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
    neshta
  • Sodinokibi family
    sodinokibi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DomainName.zip
    .zip

    Password: infected

  • DomainName.exe
    .exe windows x86

    Password: infected


    Headers

    Sections