General
-
Target
bbd98f0e73ed759a737d725d8a4a368579cac7303d0aca460274762156743577
-
Size
2.9MB
-
Sample
220524-rltlqseaf7
-
MD5
db114448b5c2e2d2a45c04ef73d816c7
-
SHA1
22c950f7ef2a49c765d6bfe22cd131013c690d0d
-
SHA256
bbd98f0e73ed759a737d725d8a4a368579cac7303d0aca460274762156743577
-
SHA512
f7ab283b58f5305947d5de3c9bfa435886772856513b5637dc4597746f01b0eb316fc4b1b4d34074b80d8808c8b606f4a7538d13fcf7c27ee64f23be2c108126
Static task
static1
Behavioral task
behavioral1
Sample
bbd98f0e73ed759a737d725d8a4a368579cac7303d0aca460274762156743577.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
bbd98f0e73ed759a737d725d8a4a368579cac7303d0aca460274762156743577.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
bbd98f0e73ed759a737d725d8a4a368579cac7303d0aca460274762156743577
-
Size
2.9MB
-
MD5
db114448b5c2e2d2a45c04ef73d816c7
-
SHA1
22c950f7ef2a49c765d6bfe22cd131013c690d0d
-
SHA256
bbd98f0e73ed759a737d725d8a4a368579cac7303d0aca460274762156743577
-
SHA512
f7ab283b58f5305947d5de3c9bfa435886772856513b5637dc4597746f01b0eb316fc4b1b4d34074b80d8808c8b606f4a7538d13fcf7c27ee64f23be2c108126
Score10/10-
Detect Neshta Payload
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-