Overview

overview

10

Static

static

10

6ba13f8615...ff.exe

windows7-x64

10

6ba13f8615...ff.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff

  • Size

    225KB

  • MD5

    2bdb5081020a5953fbea8672f5f51e64

  • SHA1

    1da6c6b09bdc7070e7dab2d2161ebf3c4e1d0e48

  • SHA256

    6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff

  • SHA512

    5196a32192eef86a06a115b8e473cb001202727e1059d6bbfcff49b105da76cddfd25d7ed12066128f1b305dd4765c6eb2a3726ef9ffff1f85acab060baef9f0

  • SSDEEP

    3072:YwV4OgSzBmh04eZFkz3Rr0gwGj9Tf8Jr85ChwV4OgSzBmh0dwV4OgSzBmh0F:YMzzILGFkzhr0pGj9ol9hMzzIgMzzI0

Score
10/10
upxneshta

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
    neshta
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ba13f8615f2fd53949fb243d901e453c0c0ee789e85e29a4a15596e8a2fd7ff
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections