General
-
Target
4710c314cfa46e1afdebae3088c8cd685fe35cce640cd55ae6ea1119ca1af7d0
-
Size
279KB
-
Sample
220524-qzrtmagdap
-
MD5
a5edb8b9594a013c8c403843e5c0a704
-
SHA1
80bf7abdb57f51514a12e45cba2e7b87169ced52
-
SHA256
4710c314cfa46e1afdebae3088c8cd685fe35cce640cd55ae6ea1119ca1af7d0
-
SHA512
d1775635ac10b703473e0712fe1f22e9df23eb07b3b690ee7e519c044e8fd44a086303592c026adc9125d8b225dbfa33ce7ac99575e3f86610520118e101c15b
Static task
static1
Behavioral task
behavioral1
Sample
4710c314cfa46e1afdebae3088c8cd685fe35cce640cd55ae6ea1119ca1af7d0.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4710c314cfa46e1afdebae3088c8cd685fe35cce640cd55ae6ea1119ca1af7d0.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
4710c314cfa46e1afdebae3088c8cd685fe35cce640cd55ae6ea1119ca1af7d0
-
Size
279KB
-
MD5
a5edb8b9594a013c8c403843e5c0a704
-
SHA1
80bf7abdb57f51514a12e45cba2e7b87169ced52
-
SHA256
4710c314cfa46e1afdebae3088c8cd685fe35cce640cd55ae6ea1119ca1af7d0
-
SHA512
d1775635ac10b703473e0712fe1f22e9df23eb07b3b690ee7e519c044e8fd44a086303592c026adc9125d8b225dbfa33ce7ac99575e3f86610520118e101c15b
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-