Overview

overview

10

Static

static

10

$R0YSLVG.exe

windows7-x64

10

$R0YSLVG.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    $R0YSLVG.exe

  • Size

    1.8MB

  • MD5

    640e19933e1a14d9ab40934f54b3b595

  • SHA1

    bb2ef0d760b00eeb631df78d97e43b11157b5077

  • SHA256

    7131b6d317e3f3e89302735348db137ec11fb92c5af43793c341bc1c67688e00

  • SHA512

    f213c23ba1c8fe0f8bf3ec8927dbed5ed2a3e97626525f76bfce4f6f5d51ab31df3c4b42128437adfb93f1113c0146c64a53063fdcfb5d1949ff71cedfa0b30c

  • SSDEEP

    49152:45XjhjuyXlt4+3oNBGsCornEsYwmve86irCrHEOG8:45XtjLVt4tJ/pmNHerm8

Score
10/10
neshta

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
    neshta
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • $R0YSLVG.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections