General

  • Target

    d2c289c77851d409911ea9a85e5d6fc241594616cf8111e10e825bfdf387b84eN.exe

  • Size

    7.6MB

  • MD5

    cd1c19f869b0f7338399eb0e7ed113b0

  • SHA1

    3da06f10da3f305026f695e69fc64bfd6f9f33b8

  • SHA256

    d2c289c77851d409911ea9a85e5d6fc241594616cf8111e10e825bfdf387b84e

  • SHA512

    0b9ddb5fb1f857ab68f0be6976c6d1c910c8c85cbdbfec04b48b5506658373a13ce14fdc13b909b9fe3544afcab68ca81c37a046fefed8d8e6f186acb23c7b02

  • SSDEEP

    98304:olerjesRJ8YQU/V1qft8F135GWcFNM1E10:frj578YQO1qfe130K1E1

Malware Config

Signatures

  • Darkcomet family
  • Detect Neshta payload 1 IoCs
  • Neshta family
  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d2c289c77851d409911ea9a85e5d6fc241594616cf8111e10e825bfdf387b84eN.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections