neshta | 2024-05-22_2219802df8a09e0ce53ddf7dc5fde337_hiddentear_neshta

Sharing

Target

2024-05-22_2219802df8a09e0ce53ddf7dc5fde337_hiddentear_neshta
Size

217KB
MD5

2219802df8a09e0ce53ddf7dc5fde337
SHA1

ad7c0b0bf751f5cf10cf4f541f78b4a6e4981080
SHA256

5ebf9f85b062b4e0417fad150002e55b7563af040dcde97834c76ed827745188
SHA512

268720b30db5885920f6b5a667bf167b72b3f3acc15ab426b86296ea1a2627df302dc19d85768298b1c35a0e5eb9d320722fa3cd17be3159a1bed0f2374ea898
SSDEEP

3072:sr85Ct2M+lmsolAIrRuw+mqv9j1MWLQy5qMjvAFs9xfOMHr85Ct:k9tV+lDAAtos9z9t

Score

10^/10

neshta xworm

Detect Neshta payload 1 IoCs

resource	yara_rule
sample	family_neshta

Detect Xworm Payload 1 IoCs

resource	yara_rule
sample	family_xworm

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Detects executables using Telegram Chat Bot 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_TelegramChatBot

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-22_2219802df8a09e0ce53ddf7dc5fde337_hiddentear_neshta