General

  • Target

    ff46ae99f33f6bc84371833c398002d0N.exe

  • Size

    96KB

  • Sample

    240820-wjbelazbnk

  • MD5

    ff46ae99f33f6bc84371833c398002d0

  • SHA1

    fc23fb1f708871b953a3c63c5fd07cd5672d3196

  • SHA256

    3199f4fa1d4caba4ae9378eca496053379f588b4a3c2dd2309a299535a096a46

  • SHA512

    dc762d47b7378df72007353cc40bdad58cd7103a3d2255e9048490e4f01fad78842f093239aef4477b1d55f0d095788d5670b70b262e69e1e37408898a9a3baa

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJtVlK7OTwGP8li9qgzSJhZd:JxqjQ+P04wsmJCCVlKe/whH

Malware Config

Targets

    • Target

      ff46ae99f33f6bc84371833c398002d0N.exe

    • Size

      96KB

    • MD5

      ff46ae99f33f6bc84371833c398002d0

    • SHA1

      fc23fb1f708871b953a3c63c5fd07cd5672d3196

    • SHA256

      3199f4fa1d4caba4ae9378eca496053379f588b4a3c2dd2309a299535a096a46

    • SHA512

      dc762d47b7378df72007353cc40bdad58cd7103a3d2255e9048490e4f01fad78842f093239aef4477b1d55f0d095788d5670b70b262e69e1e37408898a9a3baa

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJtVlK7OTwGP8li9qgzSJhZd:JxqjQ+P04wsmJCCVlKe/whH

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks