General
-
Target
5611ff600722bbce4c64c2a548c16a15992394dbdfed404d0b510e96e841b0c2
-
Size
459KB
-
Sample
220524-cvx8ysfffk
-
MD5
d3011aae2634dbcf302e0d4e3fe477f6
-
SHA1
4e71c143267bdbf09094f91cea3637037d4b8a84
-
SHA256
5611ff600722bbce4c64c2a548c16a15992394dbdfed404d0b510e96e841b0c2
-
SHA512
deedf8145187eae77cf26f148944a68e895efc0e1b6fc9153faeff6764ba27e2208b9462bbde1311429b3e1fec9d9d3c1e21d64b207ea6849aa538a9dd67cfcc
Static task
static1
Behavioral task
behavioral1
Sample
5611ff600722bbce4c64c2a548c16a15992394dbdfed404d0b510e96e841b0c2.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
5611ff600722bbce4c64c2a548c16a15992394dbdfed404d0b510e96e841b0c2.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
5611ff600722bbce4c64c2a548c16a15992394dbdfed404d0b510e96e841b0c2
-
Size
459KB
-
MD5
d3011aae2634dbcf302e0d4e3fe477f6
-
SHA1
4e71c143267bdbf09094f91cea3637037d4b8a84
-
SHA256
5611ff600722bbce4c64c2a548c16a15992394dbdfed404d0b510e96e841b0c2
-
SHA512
deedf8145187eae77cf26f148944a68e895efc0e1b6fc9153faeff6764ba27e2208b9462bbde1311429b3e1fec9d9d3c1e21d64b207ea6849aa538a9dd67cfcc
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-