General

  • Target

    05b395c52a2e20fc6ed53d4e71290b6072b897261624a774e6edea099042417e

  • Size

    211KB

  • Sample

    221002-fpclvaahdr

  • MD5

    7175076c3698b815fee7af2cb0ccded0

  • SHA1

    3c4596f64010ebe30a1ed8b6b44bd759a4385c10

  • SHA256

    05b395c52a2e20fc6ed53d4e71290b6072b897261624a774e6edea099042417e

  • SHA512

    d580880b42fbb06afa819165c7d1a5fe49957d72f8eaa5b1ec373a91e75c805e8e54d6b4ba2d32a6a1841997cb1ae0b1f8595a1f74a3836c05e2a4d87f8d3fa1

  • SSDEEP

    6144:k9nmeULd7Hvdxs1L2Dpz1KW6RzqHNmt6MKU:SUBk1aDEoHNmt6Q

Malware Config

Targets

    • Target

      05b395c52a2e20fc6ed53d4e71290b6072b897261624a774e6edea099042417e

    • Size

      211KB

    • MD5

      7175076c3698b815fee7af2cb0ccded0

    • SHA1

      3c4596f64010ebe30a1ed8b6b44bd759a4385c10

    • SHA256

      05b395c52a2e20fc6ed53d4e71290b6072b897261624a774e6edea099042417e

    • SHA512

      d580880b42fbb06afa819165c7d1a5fe49957d72f8eaa5b1ec373a91e75c805e8e54d6b4ba2d32a6a1841997cb1ae0b1f8595a1f74a3836c05e2a4d87f8d3fa1

    • SSDEEP

      6144:k9nmeULd7Hvdxs1L2Dpz1KW6RzqHNmt6MKU:SUBk1aDEoHNmt6Q

    • Modifies system executable filetype association

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks