General
-
Target
844db45a3042369d47f765d93058ca70593d2916f457d642a02095acc6ba1824.exe
-
Size
235KB
-
Sample
241206-ywskravmes
-
MD5
944b8cd4f6cea37d44b25b7c9ce04e33
-
SHA1
8accb221a51d72ea1c696dae4d47a95b96239b27
-
SHA256
844db45a3042369d47f765d93058ca70593d2916f457d642a02095acc6ba1824
-
SHA512
44fb0c044a744f3514b13cc58d4e538869fcb628ed4aa4ff4b946cb96f744a0624385a93bc7b2b2bb63c9f34ae3a6e9f27794a03077875eabbd10b7eaa120cf0
-
SSDEEP
6144:k98KE2kKh+0nc0y3CzweIITx+1a/Xt4nqREgE:XKE2kKhj8CzhImx+1gXt4nqREgE
Behavioral task
behavioral1
Sample
844db45a3042369d47f765d93058ca70593d2916f457d642a02095acc6ba1824.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
844db45a3042369d47f765d93058ca70593d2916f457d642a02095acc6ba1824.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
844db45a3042369d47f765d93058ca70593d2916f457d642a02095acc6ba1824.exe
-
Size
235KB
-
MD5
944b8cd4f6cea37d44b25b7c9ce04e33
-
SHA1
8accb221a51d72ea1c696dae4d47a95b96239b27
-
SHA256
844db45a3042369d47f765d93058ca70593d2916f457d642a02095acc6ba1824
-
SHA512
44fb0c044a744f3514b13cc58d4e538869fcb628ed4aa4ff4b946cb96f744a0624385a93bc7b2b2bb63c9f34ae3a6e9f27794a03077875eabbd10b7eaa120cf0
-
SSDEEP
6144:k98KE2kKh+0nc0y3CzweIITx+1a/Xt4nqREgE:XKE2kKhj8CzhImx+1gXt4nqREgE
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-