General

  • Target

    nlchecker.exe

  • Size

    6.6MB

  • MD5

    3e7274119ba074d4cb770f48f04d5e6a

  • SHA1

    ed7ff89af468313d0f750f1bc554f1329a5aee8c

  • SHA256

    09e88188a7cfc18f45f887f7757f3ac2eb6e4e6f04310794adc3367862ea104d

  • SHA512

    7f437a6464d77a0ecfd31772f25b41d0b8c52c0904c79e6af18509185d553146803f04eeea0af2fd66c2574e188a0f83d728b7d5ce547de545e7b45014cd6add

  • SSDEEP

    98304:Blr1P9bFLyi1e+MsSQbbIRnRMoaUMnGt0QkTt2eaaqsszacnZrmtgtXRJKO:BlRP3yi1nTcReoaU89vRlsDZrmtoRkO

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nlchecker.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • NLChecker.pyc