General

  • Target

    f06b289352490f68517eacdcfbfb97f2c8ee64d0678855d11ab887038cd031e2

  • Size

    40KB

  • Sample

    221129-jxzywsah37

  • MD5

    1dcdeb12ecbe87ad1b0d3eee1d5ba7c5

  • SHA1

    5dbd971219886ce4dd07bb29d771d634703afca8

  • SHA256

    f06b289352490f68517eacdcfbfb97f2c8ee64d0678855d11ab887038cd031e2

  • SHA512

    de2d27648b8d98845448b32375a78677c4661db6ca01dd58c5edbeccf20a5b0ca0544158438cb96a1fe6caf44a8014ef8ac419ec422a0218974f04ae035c2e49

  • SSDEEP

    768:nyxqjQl/EMQt4Oei7RwsHxKANM0nDhlzOQdJgt8:yxqjQ+P04wsZLnDrC

Malware Config

Targets

    • Target

      f06b289352490f68517eacdcfbfb97f2c8ee64d0678855d11ab887038cd031e2

    • Size

      40KB

    • MD5

      1dcdeb12ecbe87ad1b0d3eee1d5ba7c5

    • SHA1

      5dbd971219886ce4dd07bb29d771d634703afca8

    • SHA256

      f06b289352490f68517eacdcfbfb97f2c8ee64d0678855d11ab887038cd031e2

    • SHA512

      de2d27648b8d98845448b32375a78677c4661db6ca01dd58c5edbeccf20a5b0ca0544158438cb96a1fe6caf44a8014ef8ac419ec422a0218974f04ae035c2e49

    • SSDEEP

      768:nyxqjQl/EMQt4Oei7RwsHxKANM0nDhlzOQdJgt8:yxqjQ+P04wsZLnDrC

    • Modifies system executable filetype association

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Change Default File Association

1
T1042

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Tasks