General

  • Target

    9bef3a32b8465ff5c98f652c244a1f0dee6379b2d3c0245268a02b8adbd34bb4

  • Size

    1.1MB

  • Sample

    240407-3t6rtaab91

  • MD5

    295439b4a1d2097198cc7c2525ee1f12

  • SHA1

    2a1b0c7a51526054327c6aebd4122cad290514ba

  • SHA256

    9bef3a32b8465ff5c98f652c244a1f0dee6379b2d3c0245268a02b8adbd34bb4

  • SHA512

    af82f56d1030748334f094f2f9b389ad34fce67b7d1cd32f5755477f542328c84f53596601991fb40880076019395f5ae8642c7d4b527f09ab36e202ea108bfe

  • SSDEEP

    12288:2JQ4lVUu/896LkyOSE0fMNclTlPzyEqHbvzbNdIayvRYLzY:yNhfMNclTlPzyEOb7uRYLzY

Malware Config

Targets

    • Target

      9bef3a32b8465ff5c98f652c244a1f0dee6379b2d3c0245268a02b8adbd34bb4

    • Size

      1.1MB

    • MD5

      295439b4a1d2097198cc7c2525ee1f12

    • SHA1

      2a1b0c7a51526054327c6aebd4122cad290514ba

    • SHA256

      9bef3a32b8465ff5c98f652c244a1f0dee6379b2d3c0245268a02b8adbd34bb4

    • SHA512

      af82f56d1030748334f094f2f9b389ad34fce67b7d1cd32f5755477f542328c84f53596601991fb40880076019395f5ae8642c7d4b527f09ab36e202ea108bfe

    • SSDEEP

      12288:2JQ4lVUu/896LkyOSE0fMNclTlPzyEqHbvzbNdIayvRYLzY:yNhfMNclTlPzyEOb7uRYLzY

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks