General
-
Target
2025-04-15_54347443d8035aca2decdfb39c66d9fa_black-basta_elex_hijackloader_neshta
-
Size
2.3MB
-
Sample
250415-q3jmesywgy
-
MD5
54347443d8035aca2decdfb39c66d9fa
-
SHA1
e822c6934cb53280c72cbb7caa0ae52e14bddbef
-
SHA256
41d76a0220cbb32fba814e35d806faf7a34cdb41ab5c4b4e8ff29e1fbfa9943c
-
SHA512
7765e4c5e8ab83c74073fc4683a76c6266386cf28fb7ca347c9f96661c091c0228a2d5c4985fdc08349da35bf75b5c1eaef27c5768b43dfb912f5167994fbc63
-
SSDEEP
49152:zd5s5fN6ZsK2MPSnxDGgKbh+8V76KcJCSMK1cX+8eQkq:pH7YoICL7fR
Behavioral task
behavioral1
Sample
2025-04-15_54347443d8035aca2decdfb39c66d9fa_black-basta_elex_hijackloader_neshta.exe
Resource
win10v2004-20250314-en
Behavioral task
behavioral2
Sample
2025-04-15_54347443d8035aca2decdfb39c66d9fa_black-basta_elex_hijackloader_neshta.exe
Resource
win11-20250410-en
Malware Config
Targets
-
-
Target
2025-04-15_54347443d8035aca2decdfb39c66d9fa_black-basta_elex_hijackloader_neshta
-
Size
2.3MB
-
MD5
54347443d8035aca2decdfb39c66d9fa
-
SHA1
e822c6934cb53280c72cbb7caa0ae52e14bddbef
-
SHA256
41d76a0220cbb32fba814e35d806faf7a34cdb41ab5c4b4e8ff29e1fbfa9943c
-
SHA512
7765e4c5e8ab83c74073fc4683a76c6266386cf28fb7ca347c9f96661c091c0228a2d5c4985fdc08349da35bf75b5c1eaef27c5768b43dfb912f5167994fbc63
-
SSDEEP
49152:zd5s5fN6ZsK2MPSnxDGgKbh+8V76KcJCSMK1cX+8eQkq:pH7YoICL7fR
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Modifies system executable filetype association
-