General
-
Target
b5a814bdf92d16fb33bafdee1454fddff2274b29c0eb6ac9172c0cf4c8a62eff
-
Size
114KB
-
Sample
221119-ngklgshd27
-
MD5
5011fac127044036903895169b99e568
-
SHA1
cea350e36d010c19e6d07676f4b7886af4f60c59
-
SHA256
b5a814bdf92d16fb33bafdee1454fddff2274b29c0eb6ac9172c0cf4c8a62eff
-
SHA512
09386cfc8efe3ad862c5a70fc93c2f53bf86522ac39a9138d211feb494b68f8fdac8b7cf6deff9541c74e4d40a3170fe8da726a20fdc03f96c854cf3d04c34a0
-
SSDEEP
1536:JxqjQ+P04wsmJCgfvm1XkSC6EM7644o0DTZYQOCgBcjr6lfDCJXHQ:sr85Cgfe1XlJ0DTZWpBcjOUtQ
Behavioral task
behavioral1
Sample
b5a814bdf92d16fb33bafdee1454fddff2274b29c0eb6ac9172c0cf4c8a62eff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b5a814bdf92d16fb33bafdee1454fddff2274b29c0eb6ac9172c0cf4c8a62eff.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
b5a814bdf92d16fb33bafdee1454fddff2274b29c0eb6ac9172c0cf4c8a62eff
-
Size
114KB
-
MD5
5011fac127044036903895169b99e568
-
SHA1
cea350e36d010c19e6d07676f4b7886af4f60c59
-
SHA256
b5a814bdf92d16fb33bafdee1454fddff2274b29c0eb6ac9172c0cf4c8a62eff
-
SHA512
09386cfc8efe3ad862c5a70fc93c2f53bf86522ac39a9138d211feb494b68f8fdac8b7cf6deff9541c74e4d40a3170fe8da726a20fdc03f96c854cf3d04c34a0
-
SSDEEP
1536:JxqjQ+P04wsmJCgfvm1XkSC6EM7644o0DTZYQOCgBcjr6lfDCJXHQ:sr85Cgfe1XlJ0DTZWpBcjOUtQ
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-