General
-
Target
c3948757555796fe68e49b01f14c83215989486b5feca5c22ed970423a8fae06
-
Size
134KB
-
Sample
220124-bg6gqshcd5
-
MD5
f278d8ac3f13e4cedb12071e36192d84
-
SHA1
bef5000146d4d25db641c35f3473083d9786b959
-
SHA256
c3948757555796fe68e49b01f14c83215989486b5feca5c22ed970423a8fae06
-
SHA512
697a87379ebb00917a4563b6ee5892128dcf366cfdb9e29a1a7137dd4d45b259ee09a314e1efac12bb5f03054849eed552fff08d2f28089753c24f0d863f903e
Static task
static1
Behavioral task
behavioral1
Sample
c3948757555796fe68e49b01f14c83215989486b5feca5c22ed970423a8fae06.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
c3948757555796fe68e49b01f14c83215989486b5feca5c22ed970423a8fae06.exe
Resource
win10-en-20211208
Malware Config
Extracted
C:\yi49308h-readme.txt
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/2C3E333CB0B376C9
Extracted
C:\di78h-readme.txt
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/A7D0BA0898ECFE2E
Targets
-
-
Target
c3948757555796fe68e49b01f14c83215989486b5feca5c22ed970423a8fae06
-
Size
134KB
-
MD5
f278d8ac3f13e4cedb12071e36192d84
-
SHA1
bef5000146d4d25db641c35f3473083d9786b959
-
SHA256
c3948757555796fe68e49b01f14c83215989486b5feca5c22ed970423a8fae06
-
SHA512
697a87379ebb00917a4563b6ee5892128dcf366cfdb9e29a1a7137dd4d45b259ee09a314e1efac12bb5f03054849eed552fff08d2f28089753c24f0d863f903e
Score10/10-
Detect Neshta Payload
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-