General

  • Target

    259197ef971e21c13ef761a778f37b264b4c944192f5ebf3570d8e55b53e966b.exe

  • Size

    7.6MB

  • MD5

    ff4065841fad5b2f572b7f6336bc95ee

  • SHA1

    a4486a2c9c091ae023e3634eb7ab0ea0426e550f

  • SHA256

    259197ef971e21c13ef761a778f37b264b4c944192f5ebf3570d8e55b53e966b

  • SHA512

    55df6419caa2e191606ef2ee406b23de56cd728f97b8a56beebaae5bfb9a219bfebddc0a9a70eb25be2dffa494e760e47740c255e83ba9fd1782c2bd7323dd5b

  • SSDEEP

    98304:olerjesRJ8YQU/V1qft8F135GWcFNM1E108:frj578YQO1qfe130K1E17

Malware Config

Signatures

  • Darkcomet family
  • Detect Neshta payload 1 IoCs
  • Neshta family
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 259197ef971e21c13ef761a778f37b264b4c944192f5ebf3570d8e55b53e966b.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections