General

  • Target

    7fc8daf832131aa01ee5add4cfd2cde34fe755046297ff91ac455abd8b145189

  • Size

    8.2MB

  • MD5

    4e2b434627a5a4ad02832f044c3acbc1

  • SHA1

    3c15ec87b6a5f322a130c7197939a5bacdea088e

  • SHA256

    7fc8daf832131aa01ee5add4cfd2cde34fe755046297ff91ac455abd8b145189

  • SHA512

    e343a187f81dec6aaf6b052e1477df3bd2ec00aa870c07eb1cbbc244e87de02d5ba9db574da92e1282fa070bd138f4ef52a7fc538ba69ae973792a8f24cf08f9

  • SSDEEP

    196608:XM3NdkUBfAB4F0zeZKf3eT3R2iGdQlXSvZyo7t57widdQnIW:c3jkOYBfeZKfIRBGdQlqZllcnV

Score
10/10

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • StormKitty payload 1 IoCs
  • Stormkitty family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7fc8daf832131aa01ee5add4cfd2cde34fe755046297ff91ac455abd8b145189
    .rar
  • Comcast.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • results.txt
  • valids.txt