General
-
Target
0320c36632f89fe7543aea30415cc840201773c8d615a58fc9b777fb2f53a8cb
-
Size
750KB
-
Sample
221119-ngzemshd42
-
MD5
1520e091d32a2cd26e27e463408620e7
-
SHA1
21dc71f04535bdc55febcd9a9ba07394532f7784
-
SHA256
0320c36632f89fe7543aea30415cc840201773c8d615a58fc9b777fb2f53a8cb
-
SHA512
3636aa867f3a6c047d52010d0c5f6fba4025ffd99e3125bc6b418f74b2bf5b502a4f88c99e9bda1377fb3385f692681ca81f2a39f7bcbe9b3087c1b411be2b25
-
SSDEEP
12288:0plu5q98tbtS/ZykP91MHfB7GvKowxNOMfl33sUKpfcsFmcyou2HlwGBhAA29HHT:2uk9utn0cfNzoMXl33OpfPFmcyouglhc
Behavioral task
behavioral1
Sample
0320c36632f89fe7543aea30415cc840201773c8d615a58fc9b777fb2f53a8cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0320c36632f89fe7543aea30415cc840201773c8d615a58fc9b777fb2f53a8cb.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
0320c36632f89fe7543aea30415cc840201773c8d615a58fc9b777fb2f53a8cb
-
Size
750KB
-
MD5
1520e091d32a2cd26e27e463408620e7
-
SHA1
21dc71f04535bdc55febcd9a9ba07394532f7784
-
SHA256
0320c36632f89fe7543aea30415cc840201773c8d615a58fc9b777fb2f53a8cb
-
SHA512
3636aa867f3a6c047d52010d0c5f6fba4025ffd99e3125bc6b418f74b2bf5b502a4f88c99e9bda1377fb3385f692681ca81f2a39f7bcbe9b3087c1b411be2b25
-
SSDEEP
12288:0plu5q98tbtS/ZykP91MHfB7GvKowxNOMfl33sUKpfcsFmcyou2HlwGBhAA29HHT:2uk9utn0cfNzoMXl33OpfPFmcyouglhc
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-