General

  • Target

    2608b3e725afba23c84a9205f6e57f1f

  • Size

    5.6MB

  • Sample

    240409-1pw1psgd6x

  • MD5

    2608b3e725afba23c84a9205f6e57f1f

  • SHA1

    5b4e00ad7cb41e552db59e0a819af00801fc5349

  • SHA256

    c0c4afbbbfa9fb1688d9d80b930827e34a541b1bd363c7d0aa444153d4381b19

  • SHA512

    c41ab2a4f77e5faba21473773d46c1f77400b765910ecba969b15456aef82863bf7449b038bcd07683b4bde8c9252414b66419854130029d5a6161b34d879328

  • SSDEEP

    49152:4VwASOOGtlqIoIU6iJYyss61BYClg0iUyydJiW9wxfvgeWGLbxuF31sb7JPf4zDF:GX+qNBYagKoWM4NgiqSyI9nJFyLN2wk

Malware Config

Targets

    • Target

      2608b3e725afba23c84a9205f6e57f1f

    • Size

      5.6MB

    • MD5

      2608b3e725afba23c84a9205f6e57f1f

    • SHA1

      5b4e00ad7cb41e552db59e0a819af00801fc5349

    • SHA256

      c0c4afbbbfa9fb1688d9d80b930827e34a541b1bd363c7d0aa444153d4381b19

    • SHA512

      c41ab2a4f77e5faba21473773d46c1f77400b765910ecba969b15456aef82863bf7449b038bcd07683b4bde8c9252414b66419854130029d5a6161b34d879328

    • SSDEEP

      49152:4VwASOOGtlqIoIU6iJYyss61BYClg0iUyydJiW9wxfvgeWGLbxuF31sb7JPf4zDF:GX+qNBYagKoWM4NgiqSyI9nJFyLN2wk

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks