General
-
Target
2025-02-07_1aafae61211933756f5e7a8915174ade_neshta_wannacry
-
Size
5.1MB
-
Sample
250207-vx3kkazmaw
-
MD5
1aafae61211933756f5e7a8915174ade
-
SHA1
632c1a8f9090e6e84317ba6273c2cd04344963a8
-
SHA256
88d035c845c728f580a6c4d8fea532e724791faef59aef394dfa948b4f681932
-
SHA512
13ef752f5e1c18e8c277777bb34e589225dcd49da30b0c7369de3b8f12a45cc79155c6a44d840cedceac2ef92854fe832d6e357779d74b6248558750c9ec6f8c
-
SSDEEP
49152:nnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9M:nDqPoBhz1aRxcSUDk36SAEdhvxWa9M
Behavioral task
behavioral1
Sample
2025-02-07_1aafae61211933756f5e7a8915174ade_neshta_wannacry.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-02-07_1aafae61211933756f5e7a8915174ade_neshta_wannacry.exe
Resource
win10v2004-20250207-en
Malware Config
Targets
-
-
Target
2025-02-07_1aafae61211933756f5e7a8915174ade_neshta_wannacry
-
Size
5.1MB
-
MD5
1aafae61211933756f5e7a8915174ade
-
SHA1
632c1a8f9090e6e84317ba6273c2cd04344963a8
-
SHA256
88d035c845c728f580a6c4d8fea532e724791faef59aef394dfa948b4f681932
-
SHA512
13ef752f5e1c18e8c277777bb34e589225dcd49da30b0c7369de3b8f12a45cc79155c6a44d840cedceac2ef92854fe832d6e357779d74b6248558750c9ec6f8c
-
SSDEEP
49152:nnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9M:nDqPoBhz1aRxcSUDk36SAEdhvxWa9M
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-