General

  • Target

    c5fbec8e17496093fe2237baf0b6c1fc257f97232e9178f9f3abea03c85a8acd

  • Size

    494KB

  • MD5

    b159bad9460e65880396584f046214ec

  • SHA1

    ecb5feeab2c2cb16a1fc9a48f915c264bd5fe047

  • SHA256

    c5fbec8e17496093fe2237baf0b6c1fc257f97232e9178f9f3abea03c85a8acd

  • SHA512

    f1e3cfa4a642b9eb71731d842ba3944d96739781c5d70c64bc72bea20287bdc793d9e058ba507a5b912e5730345e152a686ceceb50c54bc5f1a98b384e0c5c9c

  • SSDEEP

    12288:EQgp/NfS9xBbGvdY8SMIQc2kFEm8R2NSh:7s/lS9DG2pTJF42Qh

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c5fbec8e17496093fe2237baf0b6c1fc257f97232e9178f9f3abea03c85a8acd
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections