General

  • Target

    Method.zip

  • Size

    355.2MB

  • MD5

    eaa98fb919ce0219a425694e0b03839e

  • SHA1

    0d8d21e988499e292e78675be4f614f02477fd44

  • SHA256

    1dc4ecb493c5e6319426306929fe0e667c7c5de0326ef29893c7cbb54ee3a370

  • SHA512

    c6c738f75da514a8958fbc5dd495201791b127cc0fac8a9284c90e59cbf38e51b9675c8be7831c984a1adb8ee95b3c5d58c4ca82816ecf7ea97839accac475ce

  • SSDEEP

    6291456:hmjabyvpN+HoKjNgafxL94k31af5kQuM5kdWbRz0uSsbegLMfkF+Fi2bAV:4Foz2afxuk3CkdWb15brMfkF+zAV

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 5 IoCs
  • Neshta family
  • Detects Pyinstaller 3 IoCs
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • Method.zip
    .zip
  • Method/Method/1. Keywords/2024-06-03 06-12-55.mkv
  • Method/Method/1. Keywords/Keywords edited.txt
  • Method/Method/1. Keywords/keywords.txt
  • Method/Method/2. Parameters/Dorktype Parameters.txt
  • Method/Method/2. Parameters/Hello.txt
  • Method/Method/2. Parameters/Tool/1. Parameter Hq/info.txt
  • Method/Method/2. Parameters/Tool/1. Parameter Hq/main.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • main.pyc
  • Method/Method/2. Parameters/Tool/1. Parameter Hq/parameters.txt
  • Method/Method/2. Parameters/Tool/1. Parameter Hq/urls.txt
  • Method/Method/2. Parameters/Tool/2. Clean/cleaned_p.txt
  • Method/Method/2. Parameters/Tool/2. Clean/main.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • main.pyc
  • Method/Method/2. Parameters/Tool/2. Clean/p.txt
  • Method/Method/2. Parameters/guide.mkv
  • Method/Method/3. Final/Hello.txt
  • Method/Method/3. Final/Watch Dump.mkv
  • Method/Method/MailDumper v1.2.3.exe
    .exe windows:5 windows x64 arch:x64

    c5640c7a22008f949f9bc94a27623f95


    Headers

    Imports

    Sections

  • client_scared_work.pyc
  • Method/Method/Tool/Login.txt
  • Method/Method/Tool/Mango/MangoKeywordsGUI.exe
    .exe windows:6 windows x64 arch:x64

    115164967564701371491048c68fe8b7


    Headers

    Imports

    Sections

  • Method/Method/Tool/Mango/MangoKeywordsTUI.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Method/Method/Tool/Mango/antipublic
  • Method/Method/Tool/Mango/config.yml
  • Method/Method/Tool/Mango/dork maker/domains.txt
  • Method/Method/Tool/Mango/dork maker/dork_types.txt
  • Method/Method/Tool/Mango/dork maker/dorktypes/Country Target.txt
  • Method/Method/Tool/Mango/dork maker/dorktypes/Non Country Target.txt
  • Method/Method/Tool/Mango/dork maker/keywords.txt
  • Method/Method/Tool/Mango/dork maker/page_types.txt
  • Method/Method/Tool/Mango/dork maker/parameters.txt
  • Method/Method/Tool/Mango/dork maker/search_functions.txt
  • Method/Method/Tool/Mango/hq.txt
  • Method/Method/Tool/Mango/results/Dork Maker/2024-06-03 05;59;10/dorks.txt
  • Method/Method/Tool/Mango/results/Dork Maker/2024-06-03 06;00;40/dorks.txt
  • Method/Method/Tool/Mango/results/Dork Maker/2024-06-03 06;00;43/dorks.txt
  • Method/Method/Tool/Mango/results/Dork Maker/2024-06-03 06;16;06/dorks.txt
  • Method/Method/Tool/Mango/results/Dork Maker/2024-06-03 06;16;47/dorks.txt
  • Method/Method/Tool/Mango/results/Dork Maker/2024-06-03 06;23;47/dorks.txt
  • Method/Method/Tool/Mango/results/Dork Maker/2024-06-03 06;27;16/dorks.txt
  • Method/Method/Tool/SAS/SwissArmySuite.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Method/Method/Tool/SAS/antipub.db
  • Method/Method/Tool/SAS/config.json
  • Method/Method/Tool/SAS/dorks Parameters.txt
  • Method/Method/Tool/SAS/dorks.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-01_19-57-59/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-01_19-57-59/filtered.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-01_21-19-54/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-01_21-19-54/filtered.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-01_21-23-52/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-01_21-23-52/filtered.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_00-10-19/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_00-10-19/filtered.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_00-56-12/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_00-56-12/filtered.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_06-05-18/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_06-05-18/filtered.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_06-19-38/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_06-19-38/filtered.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_06-29-03/all.txt
  • Method/Method/Tool/SAS/output/urls/2024-06-03_06-29-03/filtered.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-01_20-02-55/access.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-01_20-02-55/all.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-01_20-02-55/mssql.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-01_20-02-55/mysql.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-01_20-02-55/oracle.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-01_20-02-55/wafs.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-03_06-33-01/all.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-03_06-33-01/mysql.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-03_06-33-01/oracle.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-03_06-33-01/pgsql.txt
  • Method/Method/Tool/SAS/output/vulns/2024-06-03_06-33-01/wafs.txt
  • Method/Method/Tool/Switcher/c.txt
  • Method/Method/Tool/Switcher/main.py
  • Method/Method/Tool/Switcher/start.bat
  • Method/Method/Tool/Xdg/D3Dcompiler_47.dll
    .dll windows:6 windows x64 arch:x64

    2ce80dc262aecd9b9f45ee13d6b30c08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/all.txt
  • Method/Method/Tool/Xdg/config.json
  • Method/Method/Tool/Xdg/iconengines/qsvgicon.dll
    .dll windows:4 windows x64 arch:x64

    b077a8cc9d0019528b23cbf254e4ad4b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qgif.dll
    .dll windows:4 windows x64 arch:x64

    4329ef02212194427be44a36e0b9a121


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qicns.dll
    .dll windows:4 windows x64 arch:x64

    10d9b698ddb07a2fd3705f32d5790c63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qico.dll
    .dll windows:4 windows x64 arch:x64

    6b05618cc8a008ebc8833ded1ed2aa60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qjpeg.dll
    .dll windows:4 windows x64 arch:x64

    8df33cd6e02f67d2b98520b1edfe03da


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qsvg.dll
    .dll windows:4 windows x64 arch:x64

    6f65fb0cf0449facddbfc1671c62c47e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qtga.dll
    .dll windows:4 windows x64 arch:x64

    205a8e82b8dc38d9ed8492a53a119707


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qtiff.dll
    .dll windows:4 windows x64 arch:x64

    ab6717420fe07c98b487e22dab9c49d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qwbmp.dll
    .dll windows:4 windows x64 arch:x64

    9751f719631286f37a41d22090e35bfd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/imageformats/qwebp.dll
    .dll windows:4 windows x64 arch:x64

    34b624b4badc306a57f11d7b395f42d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/libEGL.dll
    .dll windows:4 windows x64 arch:x64

    eb91385afce4cfa47954ba8506eeb2bd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/libGLESV2.dll
    .dll windows:4 windows x64 arch:x64

    dc80800d96a4e83457229bbf61bc051c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    b8547353b6beb87cf7560462f9aacd11


    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    2ef0ef5b02a4c5c00c38f44ef05e3590


    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    dd7ccacfff5cb681a985c52c384afacb


    Headers

    Imports

    Exports

    Sections

  • Method/Method/Tool/Xdg/opengl32sw.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • Method/Method/Tool/privax_vpn_online_setup.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections