General

  • Target

    3d303d6a1649e4800cbfc8597a71db70N.exe

  • Size

    557KB

  • Sample

    240725-ar15bszclg

  • MD5

    3d303d6a1649e4800cbfc8597a71db70

  • SHA1

    a8b38f56a5eb09e80a3b692b14eecfe43098ca21

  • SHA256

    95a0d2b1b836a17ee0f144d92d70a27c9a87d9aa70bfd512415e2da973f991c1

  • SHA512

    5503598e49001ad6ad6e28a1660017257dcb0cc2e5f75ac5287ee0de64393f0edde40e954fad746440308700ec9665a75920496259ff66ac2810fd918db10984

  • SSDEEP

    6144:k9SnFnp0Ak27gU6bF8VqOAOwp6ZsQ2sh0ToPvajRtPbaRa6WsQoW8IaKFhATURZL:JnFnphE78AOOzfshdgGQ39aEhAADD/

Malware Config

Targets

    • Target

      3d303d6a1649e4800cbfc8597a71db70N.exe

    • Size

      557KB

    • MD5

      3d303d6a1649e4800cbfc8597a71db70

    • SHA1

      a8b38f56a5eb09e80a3b692b14eecfe43098ca21

    • SHA256

      95a0d2b1b836a17ee0f144d92d70a27c9a87d9aa70bfd512415e2da973f991c1

    • SHA512

      5503598e49001ad6ad6e28a1660017257dcb0cc2e5f75ac5287ee0de64393f0edde40e954fad746440308700ec9665a75920496259ff66ac2810fd918db10984

    • SSDEEP

      6144:k9SnFnp0Ak27gU6bF8VqOAOwp6ZsQ2sh0ToPvajRtPbaRa6WsQoW8IaKFhATURZL:JnFnphE78AOOzfshdgGQ39aEhAADD/

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks