General
-
Target
ebf952fe0b0a65531147375ab0b05d87a09f4909a994c1b2e9aad5cf19ccfc1b.exe
-
Size
1.6MB
-
Sample
241217-by1b2sxkfj
-
MD5
b78814860e48214ee462f1616b60b852
-
SHA1
d46bd4bc402b3de3c4b8cec8913d666036970984
-
SHA256
ebf952fe0b0a65531147375ab0b05d87a09f4909a994c1b2e9aad5cf19ccfc1b
-
SHA512
5e195e736917982909085ab2f9a73dd56c0c2f9312fc0fcc2ad4bdf273b831794e05cccc84d40b949a96b767dc6ddd55791747991253aefcd951e2665e9d7038
-
SSDEEP
6144:k9k375dLGZMzpBrEr3Giehk7QR34rv3K0g6Mmkda3gDi6fHFpvEO0Xhs9wIsO7PH:jR/bsRIi1CkrO
Behavioral task
behavioral1
Sample
ebf952fe0b0a65531147375ab0b05d87a09f4909a994c1b2e9aad5cf19ccfc1b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ebf952fe0b0a65531147375ab0b05d87a09f4909a994c1b2e9aad5cf19ccfc1b.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
ebf952fe0b0a65531147375ab0b05d87a09f4909a994c1b2e9aad5cf19ccfc1b.exe
-
Size
1.6MB
-
MD5
b78814860e48214ee462f1616b60b852
-
SHA1
d46bd4bc402b3de3c4b8cec8913d666036970984
-
SHA256
ebf952fe0b0a65531147375ab0b05d87a09f4909a994c1b2e9aad5cf19ccfc1b
-
SHA512
5e195e736917982909085ab2f9a73dd56c0c2f9312fc0fcc2ad4bdf273b831794e05cccc84d40b949a96b767dc6ddd55791747991253aefcd951e2665e9d7038
-
SSDEEP
6144:k9k375dLGZMzpBrEr3Giehk7QR34rv3K0g6Mmkda3gDi6fHFpvEO0Xhs9wIsO7PH:jR/bsRIi1CkrO
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-