General
-
Target
a66a0bcfcdaa8143633a2abc7d97a76860a3adb5ebca2feaca8c5635e1299bf9
-
Size
89KB
-
Sample
221202-hmm1xacg64
-
MD5
f632b515699b0141e60cd81181b87c3c
-
SHA1
0fe0b2558926ae7a27bdb76548a651e4297319c8
-
SHA256
a66a0bcfcdaa8143633a2abc7d97a76860a3adb5ebca2feaca8c5635e1299bf9
-
SHA512
a2d5685d6c2333760f55cda9bf2ed41a28d6d5da89057e15cd6e08bc2ebb41ffa94c3f5f16e1cff767166a3a7f80c420b636466bf68ebaab49b2e83a81293ea4
-
SSDEEP
1536:RxqjQ+P04wsmJCGuYBnyyTh0124t3vAAu9HHCYqw/hBY:kr85C+Thutxu9HHfqwpBY
Static task
static1
Behavioral task
behavioral1
Sample
a66a0bcfcdaa8143633a2abc7d97a76860a3adb5ebca2feaca8c5635e1299bf9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a66a0bcfcdaa8143633a2abc7d97a76860a3adb5ebca2feaca8c5635e1299bf9.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
a66a0bcfcdaa8143633a2abc7d97a76860a3adb5ebca2feaca8c5635e1299bf9
-
Size
89KB
-
MD5
f632b515699b0141e60cd81181b87c3c
-
SHA1
0fe0b2558926ae7a27bdb76548a651e4297319c8
-
SHA256
a66a0bcfcdaa8143633a2abc7d97a76860a3adb5ebca2feaca8c5635e1299bf9
-
SHA512
a2d5685d6c2333760f55cda9bf2ed41a28d6d5da89057e15cd6e08bc2ebb41ffa94c3f5f16e1cff767166a3a7f80c420b636466bf68ebaab49b2e83a81293ea4
-
SSDEEP
1536:RxqjQ+P04wsmJCGuYBnyyTh0124t3vAAu9HHCYqw/hBY:kr85C+Thutxu9HHfqwpBY
Score10/10-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-