General

  • Target

    e6374204e55ceb79701034afb0f993e9b9903db379a4714f26cc0aa6e6f15a4d

  • Size

    216KB

  • Sample

    221001-wjsc4saecl

  • MD5

    73853da13edec5a9d75216bdbb03843b

  • SHA1

    70e2c7d19adf42511780deac1c39d73b488764d0

  • SHA256

    e6374204e55ceb79701034afb0f993e9b9903db379a4714f26cc0aa6e6f15a4d

  • SHA512

    140dadcd6a175df9a124d36013de2128fc6cd39788f3947f0a04a5d277df15ebfae5b4534ef2045315eadbf8568090dcd428bf8c114381f9ff3155271b306851

  • SSDEEP

    3072:sr85CxOQWc4KPUteztZ72zXYbe2VhwSQYGPvI4534EFHiqqYEFHksJ:k9xHxRv7NyKl6pp9wpkg

Malware Config

Targets

    • Target

      e6374204e55ceb79701034afb0f993e9b9903db379a4714f26cc0aa6e6f15a4d

    • Size

      216KB

    • MD5

      73853da13edec5a9d75216bdbb03843b

    • SHA1

      70e2c7d19adf42511780deac1c39d73b488764d0

    • SHA256

      e6374204e55ceb79701034afb0f993e9b9903db379a4714f26cc0aa6e6f15a4d

    • SHA512

      140dadcd6a175df9a124d36013de2128fc6cd39788f3947f0a04a5d277df15ebfae5b4534ef2045315eadbf8568090dcd428bf8c114381f9ff3155271b306851

    • SSDEEP

      3072:sr85CxOQWc4KPUteztZ72zXYbe2VhwSQYGPvI4534EFHiqqYEFHksJ:k9xHxRv7NyKl6pp9wpkg

    • Modifies system executable filetype association

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks