Overview

overview

10

Static

static

10

6b40f8ab9d...b7.exe

windows7-x64

10

6b40f8ab9d...b7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6b40f8ab9d7a269a01c533185c8de1e1ba7e2fbac46dc081fe83793aa3e998b7.sample

  • Size

    202KB

  • MD5

    27a1922975907c1bbf87fb591a213d83

  • SHA1

    49d835da26f77fc11e6ecbd549703a89d105cefa

  • SHA256

    6b40f8ab9d7a269a01c533185c8de1e1ba7e2fbac46dc081fe83793aa3e998b7

  • SHA512

    748169e0d967ebaa246c44edc5d8ef9e4712adf07fcb4590d0b511c05c9f84bef3d9015a87c05b4f9d79f95a37373aef468b3f77ba4caa497871d4d256b9beae

  • SSDEEP

    3072:sr85CkACvkIF/o7t4PX5AvJ+juO4f4xm84m2+fD5RiXm5vQ:k9k5sIm7t4PyaEf4A84SfD5RiXmS

Score
10/10
neshta

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Detects command variations typically used by ransomware 1 IoCs
  • Neshta family
    neshta
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b40f8ab9d7a269a01c533185c8de1e1ba7e2fbac46dc081fe83793aa3e998b7.sample
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections