Overview

overview

10

Static

static

10

2024-03-06...il.exe

windows7-x64

10

2024-03-06...il.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-06_41daca921d5f2128ccec2e79140627d2_neshta_revil

  • Size

    207KB

  • MD5

    41daca921d5f2128ccec2e79140627d2

  • SHA1

    20f6dda39b1e6a82a7ec62b533f740af7c14fc51

  • SHA256

    a50149e4dc2ba462591cf3bc8cc588fe46d772dec69757727880b5dc312662ae

  • SHA512

    c16d04d93a95168f00086f57208c0086d3ab1d60df2b054b103902d3263051d6e80e65ebec5733ca6b14b7f5edba7d587e74514df987ddb8d52c643ffd9573fe

  • SSDEEP

    3072:Ur8lmryy2RjLTuVyu7CJDgoMT3QPWYFQxLt79LFrb30BRtBZZg+i2v:Mt2y2RsQJ8zgPWSwxJ0BXScv

Score
10/10
neshtasodinokibi

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
    neshta
  • Sodinokibi family
    sodinokibi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_41daca921d5f2128ccec2e79140627d2_neshta_revil
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections