General
-
Target
50583f78fabd9b76b335cce04124e3f367e593204180617feac26022d0bc3172
-
Size
551KB
-
Sample
221125-klfljseb95
-
MD5
5e3ad9bd917001ec764a4489f737e47c
-
SHA1
cf7496cb7fd4533f8fcd0707a27ed82b3c7a7d31
-
SHA256
50583f78fabd9b76b335cce04124e3f367e593204180617feac26022d0bc3172
-
SHA512
fe4f0b97193af8893dfb07276e9bf693f5583ae3303dd844c7b23e31090bfd596292f173b729d06682ad1ec1f1916a2d04b02e322dbed56bc3c830e0cad1814d
-
SSDEEP
12288:6QLvivRUO3vdMn3y132afS8FsDdFJeMb01JQntLOCOWe1CZDc:Qvj3k3yRFsfJemOVMDc
Behavioral task
behavioral1
Sample
50583f78fabd9b76b335cce04124e3f367e593204180617feac26022d0bc3172.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
50583f78fabd9b76b335cce04124e3f367e593204180617feac26022d0bc3172.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
50583f78fabd9b76b335cce04124e3f367e593204180617feac26022d0bc3172
-
Size
551KB
-
MD5
5e3ad9bd917001ec764a4489f737e47c
-
SHA1
cf7496cb7fd4533f8fcd0707a27ed82b3c7a7d31
-
SHA256
50583f78fabd9b76b335cce04124e3f367e593204180617feac26022d0bc3172
-
SHA512
fe4f0b97193af8893dfb07276e9bf693f5583ae3303dd844c7b23e31090bfd596292f173b729d06682ad1ec1f1916a2d04b02e322dbed56bc3c830e0cad1814d
-
SSDEEP
12288:6QLvivRUO3vdMn3y132afS8FsDdFJeMb01JQntLOCOWe1CZDc:Qvj3k3yRFsfJemOVMDc
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-