General
- Target 2026-07-24_f486626ade0f09fafd18157037d20bc2_akira_elex_icedid_neshta
- Size 4.5MB
- Sample260724-xcbbpavwdv
- SHA256 00a512d4c5f361dbd567f93d22a2f8b4e614ce5a4e95a88ad735dbb21c872c5a
- MD5 f486626ade0f09fafd18157037d20bc2
- SHA1 c22beebb1ec94fda788f20f7a9de5b2877b05be3
- SHA512 9ff37a612385ad67e5233a3ea2135559d543eda204c532ce29befb686402c967c95171d84c9c20857cae5a2c01e4c76691ef478d982b2426a840754cee534132
- SSDEEP 49152:Q17GJz1dfY8lE2f41sZyJ1FtWejps1q/i3oRWv9pcCxf3nw9pfd1hONHnj6GvNXL:86+zgFZw9pfd1hONHnj6Gt
- TLSH T138262911BB5A98ACC0AAC474834A46331B35B4CB0B35BAFF41D492752FA9AF41F3D758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-24_f486626ade0f09fafd18157037d20bc2_akira_elex_icedid_neshta.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_f486626ade0f09fafd18157037d20bc2_akira_elex_icedid_neshta.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_f486626ade0f09fafd18157037d20bc2_akira_elex_icedid_neshta
- Size 4.5MB
- SHA256 00a512d4c5f361dbd567f93d22a2f8b4e614ce5a4e95a88ad735dbb21c872c5a
- MD5 f486626ade0f09fafd18157037d20bc2
- SHA1 c22beebb1ec94fda788f20f7a9de5b2877b05be3
- SHA512 9ff37a612385ad67e5233a3ea2135559d543eda204c532ce29befb686402c967c95171d84c9c20857cae5a2c01e4c76691ef478d982b2426a840754cee534132
- SSDEEP 49152:Q17GJz1dfY8lE2f41sZyJ1FtWejps1q/i3oRWv9pcCxf3nw9pfd1hONHnj6GvNXL:86+zgFZw9pfd1hONHnj6Gt
- TLSH T138262911BB5A98ACC0AAC474834A46331B35B4CB0B35BAFF41D492752FA9AF41F3D758
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detect Neshta payload
-
Family: Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Modifies system executable filetype association