General
-
Target
ff46ae99f33f6bc84371833c398002d0N.exe
-
Size
96KB
-
Sample
240820-wjbelazbnk
-
MD5
ff46ae99f33f6bc84371833c398002d0
-
SHA1
fc23fb1f708871b953a3c63c5fd07cd5672d3196
-
SHA256
3199f4fa1d4caba4ae9378eca496053379f588b4a3c2dd2309a299535a096a46
-
SHA512
dc762d47b7378df72007353cc40bdad58cd7103a3d2255e9048490e4f01fad78842f093239aef4477b1d55f0d095788d5670b70b262e69e1e37408898a9a3baa
-
SSDEEP
768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJtVlK7OTwGP8li9qgzSJhZd:JxqjQ+P04wsmJCCVlKe/whH
Behavioral task
behavioral1
Sample
ff46ae99f33f6bc84371833c398002d0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ff46ae99f33f6bc84371833c398002d0N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ff46ae99f33f6bc84371833c398002d0N.exe
-
Size
96KB
-
MD5
ff46ae99f33f6bc84371833c398002d0
-
SHA1
fc23fb1f708871b953a3c63c5fd07cd5672d3196
-
SHA256
3199f4fa1d4caba4ae9378eca496053379f588b4a3c2dd2309a299535a096a46
-
SHA512
dc762d47b7378df72007353cc40bdad58cd7103a3d2255e9048490e4f01fad78842f093239aef4477b1d55f0d095788d5670b70b262e69e1e37408898a9a3baa
-
SSDEEP
768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJtVlK7OTwGP8li9qgzSJhZd:JxqjQ+P04wsmJCCVlKe/whH
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-