General
-
Target
7a74ed328443eb94aa5e86bdb1288eaf1db43a244eb362896ffb907d09544c0c
-
Size
311KB
-
Sample
240424-3f8dgsbf3v
-
MD5
afc0b8916ea8292e71ddef2c1ae9cf0c
-
SHA1
70548d1306750c8f930644682c8b3b199a3dae61
-
SHA256
7a74ed328443eb94aa5e86bdb1288eaf1db43a244eb362896ffb907d09544c0c
-
SHA512
073b656935b846f133ac421ada5d17b08407cd9f7683d32a5f0941230f518eb7205a28c9009e2087c841586fd9d779c2b41eb7aed07079e06611dec152fe2619
-
SSDEEP
3072:sr85CaODKYILKWnAn6Kk4EmuV2PGNQ+aRgMPqJ1mAWroY46rhNvsrhNG21sqeRIZ:k9aO+YILKWAn1fE2Dr4EAoohCe1szq9
Behavioral task
behavioral1
Sample
7a74ed328443eb94aa5e86bdb1288eaf1db43a244eb362896ffb907d09544c0c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7a74ed328443eb94aa5e86bdb1288eaf1db43a244eb362896ffb907d09544c0c.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
7a74ed328443eb94aa5e86bdb1288eaf1db43a244eb362896ffb907d09544c0c
-
Size
311KB
-
MD5
afc0b8916ea8292e71ddef2c1ae9cf0c
-
SHA1
70548d1306750c8f930644682c8b3b199a3dae61
-
SHA256
7a74ed328443eb94aa5e86bdb1288eaf1db43a244eb362896ffb907d09544c0c
-
SHA512
073b656935b846f133ac421ada5d17b08407cd9f7683d32a5f0941230f518eb7205a28c9009e2087c841586fd9d779c2b41eb7aed07079e06611dec152fe2619
-
SSDEEP
3072:sr85CaODKYILKWnAn6Kk4EmuV2PGNQ+aRgMPqJ1mAWroY46rhNvsrhNG21sqeRIZ:k9aO+YILKWAn1fE2Dr4EAoohCe1szq9
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-