General
-
Target
2608b3e725afba23c84a9205f6e57f1f
-
Size
5.6MB
-
Sample
240409-1pw1psgd6x
-
MD5
2608b3e725afba23c84a9205f6e57f1f
-
SHA1
5b4e00ad7cb41e552db59e0a819af00801fc5349
-
SHA256
c0c4afbbbfa9fb1688d9d80b930827e34a541b1bd363c7d0aa444153d4381b19
-
SHA512
c41ab2a4f77e5faba21473773d46c1f77400b765910ecba969b15456aef82863bf7449b038bcd07683b4bde8c9252414b66419854130029d5a6161b34d879328
-
SSDEEP
49152:4VwASOOGtlqIoIU6iJYyss61BYClg0iUyydJiW9wxfvgeWGLbxuF31sb7JPf4zDF:GX+qNBYagKoWM4NgiqSyI9nJFyLN2wk
Behavioral task
behavioral1
Sample
2608b3e725afba23c84a9205f6e57f1f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2608b3e725afba23c84a9205f6e57f1f.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2608b3e725afba23c84a9205f6e57f1f
-
Size
5.6MB
-
MD5
2608b3e725afba23c84a9205f6e57f1f
-
SHA1
5b4e00ad7cb41e552db59e0a819af00801fc5349
-
SHA256
c0c4afbbbfa9fb1688d9d80b930827e34a541b1bd363c7d0aa444153d4381b19
-
SHA512
c41ab2a4f77e5faba21473773d46c1f77400b765910ecba969b15456aef82863bf7449b038bcd07683b4bde8c9252414b66419854130029d5a6161b34d879328
-
SSDEEP
49152:4VwASOOGtlqIoIU6iJYyss61BYClg0iUyydJiW9wxfvgeWGLbxuF31sb7JPf4zDF:GX+qNBYagKoWM4NgiqSyI9nJFyLN2wk
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-