Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
372s -
max time network
1597s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
08/09/2024, 08:47
Behavioral task
behavioral1
Sample
PentagonRAT.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
PentagonRAT.exe
Resource
win10-20240404-en
General
-
Target
PentagonRAT.exe
-
Size
7.0MB
-
MD5
6b9810b8098dae5e179bc716240066c9
-
SHA1
cc4813da106ea57ea37a2c91bdb391e4ede4a06d
-
SHA256
f7a2507724cefb47e9830e6e74fe702139e4c4c9752ff000699e45f31bb105ef
-
SHA512
525d24eaccd65d1358011757d1425cd915f5bed533cf04cebac927fc83fe30ffa2dbf874f7469045d23d7e93ead937a9d2831a905200c986353ff47c0080ee17
-
SSDEEP
98304:TbCsMMs0P6MpCXaNhPpQlZjJung9WQh1U9L3lrdgFCDbAG4etygssGCn9sqZKQDU:TbRkq3PySSSxqiBjV04DLJ193Na
Malware Config
Signatures
-
Detect Neshta payload 1 IoCs
resource yara_rule behavioral2/memory/4892-1-0x0000000000940000-0x000000000103E000-memory.dmp family_neshta -
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.