General
-
Target
3d303d6a1649e4800cbfc8597a71db70N.exe
-
Size
557KB
-
Sample
240725-ar15bszclg
-
MD5
3d303d6a1649e4800cbfc8597a71db70
-
SHA1
a8b38f56a5eb09e80a3b692b14eecfe43098ca21
-
SHA256
95a0d2b1b836a17ee0f144d92d70a27c9a87d9aa70bfd512415e2da973f991c1
-
SHA512
5503598e49001ad6ad6e28a1660017257dcb0cc2e5f75ac5287ee0de64393f0edde40e954fad746440308700ec9665a75920496259ff66ac2810fd918db10984
-
SSDEEP
6144:k9SnFnp0Ak27gU6bF8VqOAOwp6ZsQ2sh0ToPvajRtPbaRa6WsQoW8IaKFhATURZL:JnFnphE78AOOzfshdgGQ39aEhAADD/
Behavioral task
behavioral1
Sample
3d303d6a1649e4800cbfc8597a71db70N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d303d6a1649e4800cbfc8597a71db70N.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
3d303d6a1649e4800cbfc8597a71db70N.exe
-
Size
557KB
-
MD5
3d303d6a1649e4800cbfc8597a71db70
-
SHA1
a8b38f56a5eb09e80a3b692b14eecfe43098ca21
-
SHA256
95a0d2b1b836a17ee0f144d92d70a27c9a87d9aa70bfd512415e2da973f991c1
-
SHA512
5503598e49001ad6ad6e28a1660017257dcb0cc2e5f75ac5287ee0de64393f0edde40e954fad746440308700ec9665a75920496259ff66ac2810fd918db10984
-
SSDEEP
6144:k9SnFnp0Ak27gU6bF8VqOAOwp6ZsQ2sh0ToPvajRtPbaRa6WsQoW8IaKFhATURZL:JnFnphE78AOOzfshdgGQ39aEhAADD/
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-