General

  • Target

    22c563614719a5f4982b7d30030c97d4f1d89b9f458126c52f89704706578b36

  • Size

    177KB

  • Sample

    221002-fn8ynaahdp

  • MD5

    429bd97db68f156d9e28bdf989974c10

  • SHA1

    4f32e0153b85a28215c7798d5a3462928714d37c

  • SHA256

    22c563614719a5f4982b7d30030c97d4f1d89b9f458126c52f89704706578b36

  • SHA512

    60ac4059cd2dcdb0b1ce554e618040a085685ab3595e7f953bd10e6bb011e865555a016d41d85c7be792aa449a35e0b6aa32b4e9a7801dcf09d48337d568b5ca

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJoPnskJ73S67FF:JxqjQ+P04wsmJCnPnsk1C

Malware Config

Targets

    • Target

      22c563614719a5f4982b7d30030c97d4f1d89b9f458126c52f89704706578b36

    • Size

      177KB

    • MD5

      429bd97db68f156d9e28bdf989974c10

    • SHA1

      4f32e0153b85a28215c7798d5a3462928714d37c

    • SHA256

      22c563614719a5f4982b7d30030c97d4f1d89b9f458126c52f89704706578b36

    • SHA512

      60ac4059cd2dcdb0b1ce554e618040a085685ab3595e7f953bd10e6bb011e865555a016d41d85c7be792aa449a35e0b6aa32b4e9a7801dcf09d48337d568b5ca

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJoPnskJ73S67FF:JxqjQ+P04wsmJCnPnsk1C

    • Modifies system executable filetype association

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks