General

  • Target

    c2f763b43671d75f88708e322a8e04c54b9fdacff6a02e434f1b2264a4e7e256

  • Size

    8.2MB

  • MD5

    e427acb82066cf5ac0710bd0da64e248

  • SHA1

    49985de2818a6b988dfda41eec267e8e3da067e6

  • SHA256

    c2f763b43671d75f88708e322a8e04c54b9fdacff6a02e434f1b2264a4e7e256

  • SHA512

    6fbfb217277eee41e7bd81e10eebc7a65ce32b0384e1c9b9b1db514c4f88eec0c053ad1f8f4ca2f7b3d10d4f2d6772123d40e4ba28f3bcb35d18abe1c2aed7f4

  • SSDEEP

    196608:cdYeaFuuDfyGlx21X5Sp6GemDMPwuWnhYPGA1hptZDl:eYeajDfDlMpfaMPoEr1l

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c2f763b43671d75f88708e322a8e04c54b9fdacff6a02e434f1b2264a4e7e256
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • RevIP.pyc