General
-
Target
05738717f29d3fb07f2fd088881879e4d00fbcf81d685fd141102ded555a041dN.exe
-
Size
605KB
-
Sample
241206-jz4pvstmcj
-
MD5
bc2c4209e56908fa99d673f73678c470
-
SHA1
e27ee04cfd9e6cc59f6514f77b84eba0486a7017
-
SHA256
05738717f29d3fb07f2fd088881879e4d00fbcf81d685fd141102ded555a041d
-
SHA512
4549a503c0a007306c334bb66f0c955f9d467cf4133283e06a0fe94d7fcbfbe0b00a7b8138952c54a367abd3e4ae7626f1cbde5bd24c1d34dd1000b9b61e3a8f
-
SSDEEP
12288:/+ihGVHbS0R5kuu+wegJDEVTnTssg8lD8:JqHbn3lVn9R8
Behavioral task
behavioral1
Sample
05738717f29d3fb07f2fd088881879e4d00fbcf81d685fd141102ded555a041dN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05738717f29d3fb07f2fd088881879e4d00fbcf81d685fd141102ded555a041dN.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
05738717f29d3fb07f2fd088881879e4d00fbcf81d685fd141102ded555a041dN.exe
-
Size
605KB
-
MD5
bc2c4209e56908fa99d673f73678c470
-
SHA1
e27ee04cfd9e6cc59f6514f77b84eba0486a7017
-
SHA256
05738717f29d3fb07f2fd088881879e4d00fbcf81d685fd141102ded555a041d
-
SHA512
4549a503c0a007306c334bb66f0c955f9d467cf4133283e06a0fe94d7fcbfbe0b00a7b8138952c54a367abd3e4ae7626f1cbde5bd24c1d34dd1000b9b61e3a8f
-
SSDEEP
12288:/+ihGVHbS0R5kuu+wegJDEVTnTssg8lD8:JqHbn3lVn9R8
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1