Resubmissions

General

  • Target

    240426-2rzeaaee8y_pw_infected.zip

  • Size

    63KB

  • MD5

    4fa1e3b4bc67302932e27dc106cae3d9

  • SHA1

    89ab3c5c910b93005d7e9a966f3491d897e8c51e

  • SHA256

    daaf6cc50e157764857da598cdf19a40fb410aa0e3cef84e1a3aff98d86b6fb6

  • SHA512

    51a925fc0489a1006cdd0c9f7e004fe5ac19a9ca04118906abffc73b0374543d4505fb4acc1245207f69e4a27a852d9d1092a4534ed4718967b84028f89bc5f2

  • SSDEEP

    1536:Pdt8oTDPahcMQtmiBfob4pjw4j5ye7hLhnko2AkVRNl03pSB0A3D4:PL9DCJ3MfobEjaeLnmA+RiUb4

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240426-2rzeaaee8y_pw_infected.zip
    .zip

    Password: infected

  • 240426-w39rhahe53_pw_infected.zip
    .zip

    Password: infected

  • 2024-04-26_5ccd142bdebf68e32028807f80f86fa7_neshta_phobos
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections