General

  • Target

    0cc08769f4d7522323a84ea4b766b3f0N.exe

  • Size

    218KB

  • Sample

    240724-zzeczazfkg

  • MD5

    0cc08769f4d7522323a84ea4b766b3f0

  • SHA1

    19ac9ea98fc6a6a7089a2708c9e9e0595caedb03

  • SHA256

    cd9d512e6bd80b39db62f56b1be8abd9795e71869e98c60e5e121e151eb9634d

  • SHA512

    a101189d80020d6b6ee1f062ffa130e5897334609765ff840e025a0ecfc39c94ecb60288a7bad1a56147b6b1291640896a1e73492ecf191417f9071976cfb7c1

  • SSDEEP

    3072:sr85CdybCy2v8LvFFiJJKLBD247qaOUA1G3MfAbPPpy7eSxxI6SQVpRFxlLjK:k9dyP2cForeQ92XpGeCI6S693HK

Malware Config

Targets

    • Target

      0cc08769f4d7522323a84ea4b766b3f0N.exe

    • Size

      218KB

    • MD5

      0cc08769f4d7522323a84ea4b766b3f0

    • SHA1

      19ac9ea98fc6a6a7089a2708c9e9e0595caedb03

    • SHA256

      cd9d512e6bd80b39db62f56b1be8abd9795e71869e98c60e5e121e151eb9634d

    • SHA512

      a101189d80020d6b6ee1f062ffa130e5897334609765ff840e025a0ecfc39c94ecb60288a7bad1a56147b6b1291640896a1e73492ecf191417f9071976cfb7c1

    • SSDEEP

      3072:sr85CdybCy2v8LvFFiJJKLBD247qaOUA1G3MfAbPPpy7eSxxI6SQVpRFxlLjK:k9dyP2cForeQ92XpGeCI6S693HK

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks