General

  • Target

    phobos.zip

  • Size

    60KB

  • MD5

    1f66ca1421d3b964f6c8e7f911ad61a3

  • SHA1

    18a153429ebd57074b868dbc32f9e7c45c1e05ac

  • SHA256

    e340e527d87d4164f4147e6229c3034d09b25ceb4fed28b9dceeb6a18a60d7fc

  • SHA512

    030d0a09bdecc565ce08ed25daf6bf2f296fb6d1f6681d9c3b1ab9de096b1c93a250760417733e9691ac3da735a8252d8dcb4143c017eb2a4502f372be0a1158

  • SSDEEP

    1536:+CEaKXtuQwcK5dRhOuLcxcCP1j0CpvdMvrxPzXQq:izuQw/5H1YNPV61DQq

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • phobos.zip
    .zip

    Password: infected

  • phobos.exe
    .exe windows:4 windows x86


    Headers

    Sections