General
-
Target
53125b8ade45028207dd476148af9011bb4db4aa4c6427ed8fa1d14f90bab2c4
-
Size
455KB
-
Sample
211011-qnwy7shcd4
-
MD5
a970b0c0fee23738223da299caafc800
-
SHA1
eeffbde95c891a437ecf025a4079eff3f5b67210
-
SHA256
53125b8ade45028207dd476148af9011bb4db4aa4c6427ed8fa1d14f90bab2c4
-
SHA512
be05a5034217fa057ccf553887e72c0db1df71425501f5381c2a7b856c12230aab546d8e61a7063cb750ff964061e97f38529d5d8c20b18b0a5bbaaad33bb3cf
Static task
static1
Behavioral task
behavioral1
Sample
53125b8ade45028207dd476148af9011bb4db4aa4c6427ed8fa1d14f90bab2c4.exe
Resource
win10v20210408
Malware Config
Targets
-
-
Target
53125b8ade45028207dd476148af9011bb4db4aa4c6427ed8fa1d14f90bab2c4
-
Size
455KB
-
MD5
a970b0c0fee23738223da299caafc800
-
SHA1
eeffbde95c891a437ecf025a4079eff3f5b67210
-
SHA256
53125b8ade45028207dd476148af9011bb4db4aa4c6427ed8fa1d14f90bab2c4
-
SHA512
be05a5034217fa057ccf553887e72c0db1df71425501f5381c2a7b856c12230aab546d8e61a7063cb750ff964061e97f38529d5d8c20b18b0a5bbaaad33bb3cf
Score10/10-
Detect Neshta Payload
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-