General
-
Target
easy_Malicious_0688e639b6c7a4a792d49197b37256ced7244cf8b666b72109d7db7c32cbcd44.exe
-
Size
121KB
-
Sample
230704-ss6qbagd3s
-
MD5
ddd53f4c7a75490149051939880f1d0e
-
SHA1
f5a29233b8e8024d274c122e0964ec2b782d18fc
-
SHA256
b71c86a6a97242fb08c88ff740b0c4abb6f7da750cf9e501c0db505692726104
-
SHA512
80fcc7e61cd67bc408f517eabbdddca74a08500659bb9127f360e9a16c2ad8e860409205bf36bf50053586fe7f5c07b4c2bf68740948b5a05319f644ae91dc2e
-
SSDEEP
1536:JxqjQ+P04wsmJCtL44/KqW4Kjo/GDla07HuzxU+cRmEdSsWPfTxu23kGD:sr85C54Bl4eoOBa07Hud7czwP7xuP0
Malware Config
Targets
-
-
Target
easy_Malicious_0688e639b6c7a4a792d49197b37256ced7244cf8b666b72109d7db7c32cbcd44.exe
-
Size
121KB
-
MD5
ddd53f4c7a75490149051939880f1d0e
-
SHA1
f5a29233b8e8024d274c122e0964ec2b782d18fc
-
SHA256
b71c86a6a97242fb08c88ff740b0c4abb6f7da750cf9e501c0db505692726104
-
SHA512
80fcc7e61cd67bc408f517eabbdddca74a08500659bb9127f360e9a16c2ad8e860409205bf36bf50053586fe7f5c07b4c2bf68740948b5a05319f644ae91dc2e
-
SSDEEP
1536:JxqjQ+P04wsmJCtL44/KqW4Kjo/GDla07HuzxU+cRmEdSsWPfTxu23kGD:sr85C54Bl4eoOBa07Hud7czwP7xuP0
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-