General

  • Target

    massexe.rar

  • Size

    1.2MB

  • MD5

    6a49c9dacdc038969eb4be05fda5cec1

  • SHA1

    86ec1d0aff1082392731091209bad28efb0af06b

  • SHA256

    0978712dbec1d91834dea2ca5f5e2115f32ab576ac57d40ff0a1ea337fecdae9

  • SHA512

    f1e0b5068bd2e3f4c283f5300dffb3e67a26f4529d84e9e3c2c78948356234450846541c7b7004e4ce4fc251ddf67d7a41746e4c5f7390adf4af32a75a7af80d

  • SSDEEP

    24576:FobC50XWdALUQ+H17ld8xUfhxfioB3vzJcVXuVAGkOBmu/gPV:J0XGAX+H1ZdY2LiO3dc0VAGfX/qV

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 3 IoCs
  • Neshta family
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

Files

  • massexe.rar
    .rar
  • massexe/Input.txt
  • massexe/Massscan_GUI.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • massexe/Packet.dll
    .dll windows:4 windows x86 arch:x86

    125f6213a1434f84285a3dc24077bb0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • massexe/_config.ini
  • massexe/masscan.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • massexe/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • massexe/winpcap-4.13.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • massexe/wpcap.dll
    .dll windows:4 windows x86 arch:x86

    9ed75897f81952de2bff7162c3dff044


    Headers

    Imports

    Exports

    Sections