General

  • Target

    d01e869357294562ed60f06107327ca0N.exe

  • Size

    40KB

  • Sample

    240725-pll6js1fra

  • MD5

    d01e869357294562ed60f06107327ca0

  • SHA1

    787cedadbc77e2dc873746c662f506b967a20a5c

  • SHA256

    368a3bb716a1e9788995e89d9017221d1f0e5a45bd861743c3b41d1b5fa7fbac

  • SHA512

    5689e2590addc32fbfeb706e7ae5e3b04cbde036c568bbba881a6f8f70622d6be5db1cb3484d83fe61b93c202ed419170f74039bd37ba66b343f22ae1f28c2ac

  • SSDEEP

    768:nyxqjQl/EMQt4Oei7RwsHxKANM0nDhlzOQdJOf:yxqjQ+P04wsZLnDrCD

Malware Config

Targets

    • Target

      d01e869357294562ed60f06107327ca0N.exe

    • Size

      40KB

    • MD5

      d01e869357294562ed60f06107327ca0

    • SHA1

      787cedadbc77e2dc873746c662f506b967a20a5c

    • SHA256

      368a3bb716a1e9788995e89d9017221d1f0e5a45bd861743c3b41d1b5fa7fbac

    • SHA512

      5689e2590addc32fbfeb706e7ae5e3b04cbde036c568bbba881a6f8f70622d6be5db1cb3484d83fe61b93c202ed419170f74039bd37ba66b343f22ae1f28c2ac

    • SSDEEP

      768:nyxqjQl/EMQt4Oei7RwsHxKANM0nDhlzOQdJOf:yxqjQ+P04wsZLnDrCD

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks