General
-
Target
9eb698d5f9cb696ed67d7925a70517d1847ae76eeb00551a4d6821a86a1f32d0
-
Size
120KB
-
Sample
221001-wj74kahec5
-
MD5
601996aa7361b41a9200fbd12c614050
-
SHA1
72f094b89fc78722f63d38512a838ce39b426816
-
SHA256
9eb698d5f9cb696ed67d7925a70517d1847ae76eeb00551a4d6821a86a1f32d0
-
SHA512
90a4004e92b3c5b2d20ec92d151e2645a7add8f4662eddd6e3452713982bc59b1bf442ba56c9e13c5f5c6165155db5b097db346b3062fec16336a408886a12e4
-
SSDEEP
1536:OxqjQ+P04wsmJCMdVurBkkEJGM0O7EFLPt8S7dSZDm0+ZCs0HkZGf6Ou36:fr85C9rBwJGdb5t8CkbJ
Malware Config
Targets
-
-
Target
9eb698d5f9cb696ed67d7925a70517d1847ae76eeb00551a4d6821a86a1f32d0
-
Size
120KB
-
MD5
601996aa7361b41a9200fbd12c614050
-
SHA1
72f094b89fc78722f63d38512a838ce39b426816
-
SHA256
9eb698d5f9cb696ed67d7925a70517d1847ae76eeb00551a4d6821a86a1f32d0
-
SHA512
90a4004e92b3c5b2d20ec92d151e2645a7add8f4662eddd6e3452713982bc59b1bf442ba56c9e13c5f5c6165155db5b097db346b3062fec16336a408886a12e4
-
SSDEEP
1536:OxqjQ+P04wsmJCMdVurBkkEJGM0O7EFLPt8S7dSZDm0+ZCs0HkZGf6Ou36:fr85C9rBwJGdb5t8CkbJ
Score10/10-
Detect Neshta payload
-
Modifies system executable filetype association
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-