General
-
Target
26fc0d21787ad8b1b4e261759a11032c65dbb8d03a2af6c127e0d46098f2be0a
-
Size
1.3MB
-
Sample
221118-2ddwesba63
-
MD5
0618f5f0cae9fa5b0b61337ceee87170
-
SHA1
dd7226d400b7730cec373fbbf1a559558df69df8
-
SHA256
26fc0d21787ad8b1b4e261759a11032c65dbb8d03a2af6c127e0d46098f2be0a
-
SHA512
e73ecc54aa527085cb3a353ad32ccb2dfe90be185e32fd3edda00a214a21d4ac7b1184739ca56b933af28ba028398f7a60db5c4b5d9cc40025fa852df41a8753
-
SSDEEP
24576:GCPxsDfdBtszzzkHCmKxH+vHgug5reH7zK86jGydE0vKwtwH5j+KkWsJEkjO:7P+rtszzzGCmKUg5reH7zK86jGy8zhQK
Behavioral task
behavioral1
Sample
26fc0d21787ad8b1b4e261759a11032c65dbb8d03a2af6c127e0d46098f2be0a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
26fc0d21787ad8b1b4e261759a11032c65dbb8d03a2af6c127e0d46098f2be0a.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
26fc0d21787ad8b1b4e261759a11032c65dbb8d03a2af6c127e0d46098f2be0a
-
Size
1.3MB
-
MD5
0618f5f0cae9fa5b0b61337ceee87170
-
SHA1
dd7226d400b7730cec373fbbf1a559558df69df8
-
SHA256
26fc0d21787ad8b1b4e261759a11032c65dbb8d03a2af6c127e0d46098f2be0a
-
SHA512
e73ecc54aa527085cb3a353ad32ccb2dfe90be185e32fd3edda00a214a21d4ac7b1184739ca56b933af28ba028398f7a60db5c4b5d9cc40025fa852df41a8753
-
SSDEEP
24576:GCPxsDfdBtszzzkHCmKxH+vHgug5reH7zK86jGydE0vKwtwH5j+KkWsJEkjO:7P+rtszzzGCmKUg5reH7zK86jGy8zhQK
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-