General
-
Target
226e34dfc46fa9247f610520b83d16286dd81afdd20a58a13b236aa6a1b1d059
-
Size
2.4MB
-
Sample
220524-1ezc3scfgm
-
MD5
0fdc3996051a77f181c1da5b3f2e044c
-
SHA1
d1c3d8058983e1a9b98b49cc0ea0acc07fbe4a3c
-
SHA256
226e34dfc46fa9247f610520b83d16286dd81afdd20a58a13b236aa6a1b1d059
-
SHA512
c92da723f52da08ee5b58d37326e8fa0c9ffe904c06bba2bdd62eeaf307b8e19a3d3e0ab5bddc0fe9f2c7410f3c36adfefab4134a61bf01ade35138436be3e35
Static task
static1
Behavioral task
behavioral1
Sample
226e34dfc46fa9247f610520b83d16286dd81afdd20a58a13b236aa6a1b1d059.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
226e34dfc46fa9247f610520b83d16286dd81afdd20a58a13b236aa6a1b1d059.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
226e34dfc46fa9247f610520b83d16286dd81afdd20a58a13b236aa6a1b1d059
-
Size
2.4MB
-
MD5
0fdc3996051a77f181c1da5b3f2e044c
-
SHA1
d1c3d8058983e1a9b98b49cc0ea0acc07fbe4a3c
-
SHA256
226e34dfc46fa9247f610520b83d16286dd81afdd20a58a13b236aa6a1b1d059
-
SHA512
c92da723f52da08ee5b58d37326e8fa0c9ffe904c06bba2bdd62eeaf307b8e19a3d3e0ab5bddc0fe9f2c7410f3c36adfefab4134a61bf01ade35138436be3e35
Score10/10-
Detect Neshta Payload
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-