General
-
Target
212c055a473851f93598fe4b0d56d05e6d65e9f309ed218ca3046f5d7803e3cd
-
Size
271KB
-
Sample
221121-nh1n4aca7t
-
MD5
31e1bddd2d29eb5363bbec499f1bdba0
-
SHA1
4d38d7ca431558d1aaefb2caa60cee263d9b4845
-
SHA256
212c055a473851f93598fe4b0d56d05e6d65e9f309ed218ca3046f5d7803e3cd
-
SHA512
b64ca6d9a79768293c44145e0e25506f51ab495e7e3f93bfaf7a0b295539ee45fe5709d067b41c15d1ebb8a70497c759cd365a3aea5cf8f47179f04a92318733
-
SSDEEP
3072:sr85Cr5TNIT27BEOan4NhIsNfgI4q+2Qi/d+OX+B3I+h8/EN8r85C:k9rjIT27BEOa+hTLxl1d+OXG/i39
Behavioral task
behavioral1
Sample
212c055a473851f93598fe4b0d56d05e6d65e9f309ed218ca3046f5d7803e3cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
212c055a473851f93598fe4b0d56d05e6d65e9f309ed218ca3046f5d7803e3cd.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
212c055a473851f93598fe4b0d56d05e6d65e9f309ed218ca3046f5d7803e3cd
-
Size
271KB
-
MD5
31e1bddd2d29eb5363bbec499f1bdba0
-
SHA1
4d38d7ca431558d1aaefb2caa60cee263d9b4845
-
SHA256
212c055a473851f93598fe4b0d56d05e6d65e9f309ed218ca3046f5d7803e3cd
-
SHA512
b64ca6d9a79768293c44145e0e25506f51ab495e7e3f93bfaf7a0b295539ee45fe5709d067b41c15d1ebb8a70497c759cd365a3aea5cf8f47179f04a92318733
-
SSDEEP
3072:sr85Cr5TNIT27BEOan4NhIsNfgI4q+2Qi/d+OX+B3I+h8/EN8r85C:k9rjIT27BEOa+hTLxl1d+OXG/i39
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-