General

  • Target

    4d0e33bd328027f5453ecb001b37a6555316cf63c7bb8d4f86a957a1e94ce43e

  • Size

    1.7MB

  • MD5

    9f0768271020c78104254ec03d4ed2c6

  • SHA1

    818491ee05a1f42775c36e44cd3dd9ccdef7eb7d

  • SHA256

    4d0e33bd328027f5453ecb001b37a6555316cf63c7bb8d4f86a957a1e94ce43e

  • SHA512

    168d2d3c2ae976a273dbd7cc0bb1634b1b2bb9cd3e7ba73979c298b1914e8102c49d254e8e1b8bac5e557d9cb35e55bf3e5121d7cda7f5741bb12dbc0cfc4bc0

  • SSDEEP

    49152:DLOr1MjIwtNsRBmuYiv4Dp41Jv8roBhv/YkxgK:3GMtyRBaig2JvJgK

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
  • Neshta family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d0e33bd328027f5453ecb001b37a6555316cf63c7bb8d4f86a957a1e94ce43e
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections