General
- Target 2fc2a8b0d91fd306fbe26f93a7e8320bc9ecb644dd21dae9267b0a20d37ec456
- Size 116KB
- Sample240708-kk8wpstcje
- SHA256 2fc2a8b0d91fd306fbe26f93a7e8320bc9ecb644dd21dae9267b0a20d37ec456
Score
10/10
Malware Config
Targets
-
- Target Files_/7z.exe
- Size 205KB
- SHA256 dcd991e908b442aabbb173c5dcc29bb2f1444d64e128a989b281ebb9afc9a1b0
Score10/10Detect Neshta payload
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Modifies system executable filetype association
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
- Target Files_/svchost.com
- Size 40KB
- SHA256 e02cdfa2eda01b25a01fcfbda69c03225193d78cc5b6f618e828d3e1c9a83191
Score10/10Detect Neshta payload
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
Loads dropped DLL
Modifies system executable filetype association
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.