General
-
Target
41eaae543b7a0f482583b7c12ead6c80N.exe
-
Size
146KB
-
Sample
240725-a8hpbaxfpm
-
MD5
41eaae543b7a0f482583b7c12ead6c80
-
SHA1
2cdc448a89c89398a4516a8327151f3c13b8fc84
-
SHA256
874853c627962cb3c1c45df3319dc0f81d7575927584295343161ab6f62260f9
-
SHA512
b2943426eb2eaf7f72db03773c7e9af4710c3fd1b54ce83a6119853f901a74d41a6f0fa32dc393bd56066af34e6613abaa3bfab4e306eb0c1b7c3891f8f25713
-
SSDEEP
3072:sr85CkkbAYn2GgYlBYN2fHYTo+TOt8wDSRUTT:k9xbAMpgY3gT28DRUTT
Behavioral task
behavioral1
Sample
41eaae543b7a0f482583b7c12ead6c80N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41eaae543b7a0f482583b7c12ead6c80N.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
41eaae543b7a0f482583b7c12ead6c80N.exe
-
Size
146KB
-
MD5
41eaae543b7a0f482583b7c12ead6c80
-
SHA1
2cdc448a89c89398a4516a8327151f3c13b8fc84
-
SHA256
874853c627962cb3c1c45df3319dc0f81d7575927584295343161ab6f62260f9
-
SHA512
b2943426eb2eaf7f72db03773c7e9af4710c3fd1b54ce83a6119853f901a74d41a6f0fa32dc393bd56066af34e6613abaa3bfab4e306eb0c1b7c3891f8f25713
-
SSDEEP
3072:sr85CkkbAYn2GgYlBYN2fHYTo+TOt8wDSRUTT:k9xbAMpgY3gT28DRUTT
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-