General
-
Target
6bb608cb4d6477938bc2b74b4eef4102dcccfba718852aecd9cf56778961a25fN.exe
-
Size
119KB
-
Sample
241210-yhnpms1mbq
-
MD5
c7fcbc0fd80be15e8cff45c578e24760
-
SHA1
9a8fb21a0569f3f61141460c3b5b225d8a3c4494
-
SHA256
6bb608cb4d6477938bc2b74b4eef4102dcccfba718852aecd9cf56778961a25f
-
SHA512
a6209b104f48421036a1449eaf497d8b104f56868b759c3083064e04c6fc566203df9ff7501d538a64f45f9f85fe7a0ec86cc2cf7d63e2d783951db426eb1e8d
-
SSDEEP
1536:JxqjQ+P04wsmJCbF+oIjVhhPoSeFB2D9X/42dX49uSxNy5fuAOKzxiTQ9:sr85CbQp5hhPo9FMX/4eI9RNZAOK9
Behavioral task
behavioral1
Sample
6bb608cb4d6477938bc2b74b4eef4102dcccfba718852aecd9cf56778961a25fN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6bb608cb4d6477938bc2b74b4eef4102dcccfba718852aecd9cf56778961a25fN.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
6bb608cb4d6477938bc2b74b4eef4102dcccfba718852aecd9cf56778961a25fN.exe
-
Size
119KB
-
MD5
c7fcbc0fd80be15e8cff45c578e24760
-
SHA1
9a8fb21a0569f3f61141460c3b5b225d8a3c4494
-
SHA256
6bb608cb4d6477938bc2b74b4eef4102dcccfba718852aecd9cf56778961a25f
-
SHA512
a6209b104f48421036a1449eaf497d8b104f56868b759c3083064e04c6fc566203df9ff7501d538a64f45f9f85fe7a0ec86cc2cf7d63e2d783951db426eb1e8d
-
SSDEEP
1536:JxqjQ+P04wsmJCbF+oIjVhhPoSeFB2D9X/42dX49uSxNy5fuAOKzxiTQ9:sr85CbQp5hhPo9FMX/4eI9RNZAOK9
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-