General
-
Target
9c5b3eb7079ab91b25bf9f49445ae8c352572e15e9c2c43266c114a39651894d
-
Size
1.1MB
-
Sample
221130-avmfcaff3s
-
MD5
ac01f8f0f25f9bc5471f4894ff54d369
-
SHA1
b2baf94e0c50c7e390149c20c16f125190895c46
-
SHA256
9c5b3eb7079ab91b25bf9f49445ae8c352572e15e9c2c43266c114a39651894d
-
SHA512
276dcc61edd70146c1c05c1d4072b7dc5eb9a3afeb0e8ebaf75cc155cf4ffa1f356fbab8a49b06906a33fd898e974ed43c228aa1353c72be84269625b97d881b
-
SSDEEP
24576:pw3+mxJV4X3pdVerLSvrVe2Kl3JEyLoPSznPLQP6gk9O:u3+mfVg3pdFReF3JEyLoPQP8Pq9O
Static task
static1
Behavioral task
behavioral1
Sample
9c5b3eb7079ab91b25bf9f49445ae8c352572e15e9c2c43266c114a39651894d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c5b3eb7079ab91b25bf9f49445ae8c352572e15e9c2c43266c114a39651894d.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
9c5b3eb7079ab91b25bf9f49445ae8c352572e15e9c2c43266c114a39651894d
-
Size
1.1MB
-
MD5
ac01f8f0f25f9bc5471f4894ff54d369
-
SHA1
b2baf94e0c50c7e390149c20c16f125190895c46
-
SHA256
9c5b3eb7079ab91b25bf9f49445ae8c352572e15e9c2c43266c114a39651894d
-
SHA512
276dcc61edd70146c1c05c1d4072b7dc5eb9a3afeb0e8ebaf75cc155cf4ffa1f356fbab8a49b06906a33fd898e974ed43c228aa1353c72be84269625b97d881b
-
SSDEEP
24576:pw3+mxJV4X3pdVerLSvrVe2Kl3JEyLoPSznPLQP6gk9O:u3+mfVg3pdFReF3JEyLoPQP8Pq9O
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-