General

  • Target

    5969d2ad68e7ddf51156bf1ec9235357793ac7d498ad26461ee96d7f574b7192

  • Size

    334KB

  • Sample

    221002-fn5w1aahdn

  • MD5

    6b9350cb973e87543fc172971b39bc13

  • SHA1

    645b17f296ae8c1bad19864c49c8ffe68edf73d1

  • SHA256

    5969d2ad68e7ddf51156bf1ec9235357793ac7d498ad26461ee96d7f574b7192

  • SHA512

    c20aafc81efd6932b3bad9a3945d51488767e33d8120d67bae73db55df20bdf74a3ce4f479923814b77d0cad72b02c00e3966de219c6f9025360df9d259a6dd9

  • SSDEEP

    6144:k9eXFh6Mfjge+5mdtSd8c6H83wT66vlmuYVBH5+yPZYmPZQz0t:hNj+5md8HQQt

Malware Config

Targets

    • Target

      5969d2ad68e7ddf51156bf1ec9235357793ac7d498ad26461ee96d7f574b7192

    • Size

      334KB

    • MD5

      6b9350cb973e87543fc172971b39bc13

    • SHA1

      645b17f296ae8c1bad19864c49c8ffe68edf73d1

    • SHA256

      5969d2ad68e7ddf51156bf1ec9235357793ac7d498ad26461ee96d7f574b7192

    • SHA512

      c20aafc81efd6932b3bad9a3945d51488767e33d8120d67bae73db55df20bdf74a3ce4f479923814b77d0cad72b02c00e3966de219c6f9025360df9d259a6dd9

    • SSDEEP

      6144:k9eXFh6Mfjge+5mdtSd8c6H83wT66vlmuYVBH5+yPZYmPZQz0t:hNj+5md8HQQt

    • Modifies system executable filetype association

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks