Analysis
-
max time kernel
52s -
max time network
60s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08/09/2024, 08:47
General
-
Target
PentagonRAT.exe
-
Size
7.0MB
-
MD5
6b9810b8098dae5e179bc716240066c9
-
SHA1
cc4813da106ea57ea37a2c91bdb391e4ede4a06d
-
SHA256
f7a2507724cefb47e9830e6e74fe702139e4c4c9752ff000699e45f31bb105ef
-
SHA512
525d24eaccd65d1358011757d1425cd915f5bed533cf04cebac927fc83fe30ffa2dbf874f7469045d23d7e93ead937a9d2831a905200c986353ff47c0080ee17
-
SSDEEP
98304:TbCsMMs0P6MpCXaNhPpQlZjJung9WQh1U9L3lrdgFCDbAG4etygssGCn9sqZKQDU:TbRkq3PySSSxqiBjV04DLJ193Na
Score
10/10
Malware Config
Signatures
-
Detect Neshta payload 1 IoCs
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
Processes
-
C:\Users\Admin\AppData\Local\Temp\PentagonRAT.exe"C:\Users\Admin\AppData\Local\Temp\PentagonRAT.exe"1⤵
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
7.0MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
1.7MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
1.7MB
-
Filesize
10.8MB