Overview

overview

10

Static

static

10

valo/12803...62.pdb

windows10-ltsc 2021-x64

8

valo/LUA.exe

windows10-ltsc 2021-x64

10

valo/LUA.pdb

windows10-ltsc 2021-x64

3

valo/Mapper.exe

windows10-ltsc 2021-x64

10

valo/Oykyo.sys

windows10-ltsc 2021-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    valo.7z

  • Size

    4.6MB

  • MD5

    318ab2045734f37a897211141e0d6366

  • SHA1

    5a22c155d558b4757270499ab683994416994fa8

  • SHA256

    6b9db92b56ba90f8ae4a00e0980a384eb3cbe5acf88405f0cb5758ddb2fc60e3

  • SHA512

    82a4a6a20bf95b37253506cd9be384030690b44b549f443e612f84144c74f5bee83032e58f32eaa5726e8275c1203a7c55873f57b624e3f0247c96e7868a55f9

  • SSDEEP

    98304:U0uggDYIXwGP8IEI5tQHxwWLkE+GZx2FjE+HdZ7:UgShP8I5teHr+GZx2JV7

Score
10/10
neshta

Malware Config

Signatures

  • Detect Neshta payload 2 IoCs
  • Neshta family
    neshta
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • valo.7z
    .7z
  • valo/128034b59b7011ed13035550b6a88562.pdb
  • valo/LUA.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • valo/LUA.pdb
  • valo/Mapper.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • valo/Oykyo.sys
    .sys windows:10 windows x64 arch:x64

    d5e90601da448613a1aa254ac5f0ae08


    Headers

    Imports

    Sections