General
-
Target
0e2dd048c0bd77d954c55f5986c8d971e99f1aa00900145fdf6f2bd43be7dff5
-
Size
1.1MB
-
Sample
221127-2bfx1adb45
-
MD5
cad081743dc19e504ac39cf68358ba2c
-
SHA1
9cfb2925c88170e1fcab5fdf49c97dded86b2b2f
-
SHA256
d94d6147674b9a6bcf90d4f12df531949ab5a99b94d3cee509a42015e6399d22
-
SHA512
36f598c2c579f82a4ec4b02c1d5f2d477cc70aaa59c7f9638d5efbab8490eaf61ac13667895312edede6a80c30b2a48eca1df3f6da82cfc5d4ed388bac358b0c
-
SSDEEP
24576:oT5oniNvHZlzbjB+dQz+gIqbm/fgMvHWxp0jBcHGffg9YmWiyJ8p:G5onSlvNeZqbmQIhCifC1yU
Behavioral task
behavioral1
Sample
0e2dd048c0bd77d954c55f5986c8d971e99f1aa00900145fdf6f2bd43be7dff5.exe
Resource
win7-20220901-en
Malware Config
Targets
-
-
Target
0e2dd048c0bd77d954c55f5986c8d971e99f1aa00900145fdf6f2bd43be7dff5
-
Size
1.1MB
-
MD5
6fcfd905ca541be7bef5211e51f33783
-
SHA1
6b92499c0bc80a5207b4c2807803da7b8cfd8eaf
-
SHA256
0e2dd048c0bd77d954c55f5986c8d971e99f1aa00900145fdf6f2bd43be7dff5
-
SHA512
586e4231877e7ed9e818621dc7822d47cdff2502139fc4f46837d490c6f134aee54c616505a60928d421fcdf2e3b875afb3309c4f8f022ee46e673a924180dab
-
SSDEEP
24576:DRBrzwX0YmJI8DRnCD4jtnT8Q1r0ly78ipwR7H:FJzdnm4lT8Q1r0pieR7H
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
XMRig Miner payload
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-