General

  • Target

    2024-05-25_c563927d8f56cfe7238b042829d5693d_cobalt-strike_cobaltstrike_darkgate_neshta

  • Size

    3.5MB

  • MD5

    c563927d8f56cfe7238b042829d5693d

  • SHA1

    b4c5af89e3b315a041ec55c7c351a0103283fa7c

  • SHA256

    9c9e575ed0817fff5eaaa7af7c65da6be92b54e8f4fe4fcb6f6420074b850120

  • SHA512

    f3dddc68abf36a8a6e9c349e681130a43580b60cf272139f38fc030d99761507a99a900256e8394eff7a562619aa507f793a4c63698eeb1faa31998184bb2953

  • SSDEEP

    49152:kHyjtk2MYC5GD5REXSVMDi3Knj2GaA5MPCEmod2n9:kmtk2aq2SVMD8KawS0n9

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_c563927d8f56cfe7238b042829d5693d_cobalt-strike_cobaltstrike_darkgate_neshta
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections