General
-
Target
8d6af57135ea63fd90836f3a3a569ff166014d83531a1774449a1404e2b8d206
-
Size
174KB
-
Sample
240420-adkkesbh61
-
MD5
467a789dcfab0b263e56b6b18c821176
-
SHA1
94ab7b8982a09fb7dfc2861bafa48e1b2c4b3743
-
SHA256
8d6af57135ea63fd90836f3a3a569ff166014d83531a1774449a1404e2b8d206
-
SHA512
856351e93fb2388103f6fe9a3037991d01118e0e192a7e521d6ca1bfedbc7723cc7ba7c10f7c2727004f1aa0cc8d4c0aa002f63d488bebd6a1a21c86a10abb1c
-
SSDEEP
3072:jr85CKVH0s1OBLKWo5ihusoCZO8cPTDAXURDA9LFv:/9KVH0sl2up0IEt
Behavioral task
behavioral1
Sample
8d6af57135ea63fd90836f3a3a569ff166014d83531a1774449a1404e2b8d206.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8d6af57135ea63fd90836f3a3a569ff166014d83531a1774449a1404e2b8d206.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
8d6af57135ea63fd90836f3a3a569ff166014d83531a1774449a1404e2b8d206
-
Size
174KB
-
MD5
467a789dcfab0b263e56b6b18c821176
-
SHA1
94ab7b8982a09fb7dfc2861bafa48e1b2c4b3743
-
SHA256
8d6af57135ea63fd90836f3a3a569ff166014d83531a1774449a1404e2b8d206
-
SHA512
856351e93fb2388103f6fe9a3037991d01118e0e192a7e521d6ca1bfedbc7723cc7ba7c10f7c2727004f1aa0cc8d4c0aa002f63d488bebd6a1a21c86a10abb1c
-
SSDEEP
3072:jr85CKVH0s1OBLKWo5ihusoCZO8cPTDAXURDA9LFv:/9KVH0sl2up0IEt
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-