General
-
Target
0bb5a52f4fe79a8c7fbb4462c472827d0a58e78b985dd102e6f444d41613e19e
-
Size
657KB
-
Sample
211014-ajyn8sfdc8
-
MD5
3fc196a38075b3009bbb2c7991f07cd3
-
SHA1
ad0fe22f3d575530bbd4c03be30c8633639ba02c
-
SHA256
0bb5a52f4fe79a8c7fbb4462c472827d0a58e78b985dd102e6f444d41613e19e
-
SHA512
30505c73d8c224b061e32eaaeb5fe35420aab8afc21529946dc69c18177cb99c362ced78067818c8473020dbb4a5f0509719735790d5eb3fe8d4a5f3e6364f3c
Static task
static1
Behavioral task
behavioral1
Sample
0bb5a52f4fe79a8c7fbb4462c472827d0a58e78b985dd102e6f444d41613e19e.exe
Resource
win10v20210408
Malware Config
Targets
-
-
Target
0bb5a52f4fe79a8c7fbb4462c472827d0a58e78b985dd102e6f444d41613e19e
-
Size
657KB
-
MD5
3fc196a38075b3009bbb2c7991f07cd3
-
SHA1
ad0fe22f3d575530bbd4c03be30c8633639ba02c
-
SHA256
0bb5a52f4fe79a8c7fbb4462c472827d0a58e78b985dd102e6f444d41613e19e
-
SHA512
30505c73d8c224b061e32eaaeb5fe35420aab8afc21529946dc69c18177cb99c362ced78067818c8473020dbb4a5f0509719735790d5eb3fe8d4a5f3e6364f3c
Score10/10-
Detect Neshta Payload
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-