General
-
Target
2025-03-30_6e1ca5bc51e2e3ab970e98c000f00b20_black-basta_hijackloader_neshta
-
Size
7.2MB
-
Sample
250330-fq2blasqx4
-
MD5
6e1ca5bc51e2e3ab970e98c000f00b20
-
SHA1
c084338ded26524d8fa746a4bdc43a5ea12aa891
-
SHA256
d1a394a8664ae1b143e7269f452948eda1af0abc0104b25020cef569e29d2678
-
SHA512
9b68b4b410a1f7c90bbd17a5dc37da1e3637619ae492098a14803194e7d0b367a3572d5a6ac5c5c88a9b772857f0111b1ba26589cfcb4912d8d252786bba28c7
-
SSDEEP
196608:2kmHHw/Az0Z4TvgYWMkaVv/Az0Z4TvpoJ3YWMkaLB:2kmHBzWGvDWMezWGvuJIWMrB
Behavioral task
behavioral1
Sample
2025-03-30_6e1ca5bc51e2e3ab970e98c000f00b20_black-basta_hijackloader_neshta.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-03-30_6e1ca5bc51e2e3ab970e98c000f00b20_black-basta_hijackloader_neshta.exe
Resource
win10v2004-20250314-en
Malware Config
Targets
-
-
Target
2025-03-30_6e1ca5bc51e2e3ab970e98c000f00b20_black-basta_hijackloader_neshta
-
Size
7.2MB
-
MD5
6e1ca5bc51e2e3ab970e98c000f00b20
-
SHA1
c084338ded26524d8fa746a4bdc43a5ea12aa891
-
SHA256
d1a394a8664ae1b143e7269f452948eda1af0abc0104b25020cef569e29d2678
-
SHA512
9b68b4b410a1f7c90bbd17a5dc37da1e3637619ae492098a14803194e7d0b367a3572d5a6ac5c5c88a9b772857f0111b1ba26589cfcb4912d8d252786bba28c7
-
SSDEEP
196608:2kmHHw/Az0Z4TvgYWMkaVv/Az0Z4TvpoJ3YWMkaLB:2kmHBzWGvDWMezWGvuJIWMrB
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-