General
-
Target
eb78d59cc372f65a13acff914d45d6f38d532405d338facc48dae2f24fb791ef
-
Size
273KB
-
Sample
220524-br8d3sfacp
-
MD5
c388e87f1e4f31ec55f155749df1854f
-
SHA1
6ebe5db1c8751686cd85a90d919b73ea5f246c89
-
SHA256
eb78d59cc372f65a13acff914d45d6f38d532405d338facc48dae2f24fb791ef
-
SHA512
2ecbe1ad25aa245d579e4f765ab85187b11e4dad19af6fef8781811a6944398bccaea3fad738c73b541f94873cd09e3d233366155e049c0d32e95ebf3d3facdf
Static task
static1
Behavioral task
behavioral1
Sample
eb78d59cc372f65a13acff914d45d6f38d532405d338facc48dae2f24fb791ef.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
eb78d59cc372f65a13acff914d45d6f38d532405d338facc48dae2f24fb791ef.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
eb78d59cc372f65a13acff914d45d6f38d532405d338facc48dae2f24fb791ef
-
Size
273KB
-
MD5
c388e87f1e4f31ec55f155749df1854f
-
SHA1
6ebe5db1c8751686cd85a90d919b73ea5f246c89
-
SHA256
eb78d59cc372f65a13acff914d45d6f38d532405d338facc48dae2f24fb791ef
-
SHA512
2ecbe1ad25aa245d579e4f765ab85187b11e4dad19af6fef8781811a6944398bccaea3fad738c73b541f94873cd09e3d233366155e049c0d32e95ebf3d3facdf
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-