General
-
Target
de12c907582b3e3316519e9d1811dfab9de8a5110510c5915882a08d50b48750
-
Size
216KB
-
Sample
221119-ngc7eahd23
-
MD5
420c4e6b549b86a760eba256381ab6cd
-
SHA1
7dcf7faa4bbf6ffa808f7d83b70748732798047c
-
SHA256
de12c907582b3e3316519e9d1811dfab9de8a5110510c5915882a08d50b48750
-
SHA512
8659b2ea4cd368a1d311ac526c6149f0eae357b19b2d7b3e3de8777af33187e523fcbe8f4a741fda56c27fe52f9d7186aae7323c5e4a68a09655a54281b2dc39
-
SSDEEP
3072:Rr8WDrC1lTgobhoeCc+4+QT9xLO85qYI+pwDm892mOQwGHB46LBX:tu1lkobhZCyzLOzYI+g9tB46LBX
Static task
static1
Behavioral task
behavioral1
Sample
de12c907582b3e3316519e9d1811dfab9de8a5110510c5915882a08d50b48750.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de12c907582b3e3316519e9d1811dfab9de8a5110510c5915882a08d50b48750.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
de12c907582b3e3316519e9d1811dfab9de8a5110510c5915882a08d50b48750
-
Size
216KB
-
MD5
420c4e6b549b86a760eba256381ab6cd
-
SHA1
7dcf7faa4bbf6ffa808f7d83b70748732798047c
-
SHA256
de12c907582b3e3316519e9d1811dfab9de8a5110510c5915882a08d50b48750
-
SHA512
8659b2ea4cd368a1d311ac526c6149f0eae357b19b2d7b3e3de8777af33187e523fcbe8f4a741fda56c27fe52f9d7186aae7323c5e4a68a09655a54281b2dc39
-
SSDEEP
3072:Rr8WDrC1lTgobhoeCc+4+QT9xLO85qYI+pwDm892mOQwGHB46LBX:tu1lkobhZCyzLOzYI+g9tB46LBX
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-