General

  • Target

    6ae741e6ecf9d6bb73d81625d6c125b95dd2d99806ea764cb03bd9ae1768bba7

  • Size

    122KB

  • Sample

    241015-2t4rsa1eqe

  • MD5

    1d7d4ad94ac3f0e39c1df0cec23a5858

  • SHA1

    1146bacd739ef6c5f1c68c62c0a5f6549d695bfc

  • SHA256

    6ae741e6ecf9d6bb73d81625d6c125b95dd2d99806ea764cb03bd9ae1768bba7

  • SHA512

    decae796c1ca8a07b0e70d1a36634ffa4125393e03208d384a1cba4d54d1d9b494b6fd6a18526fe3e9505795579a6ed3c1c3c1512fa3b66126a5581b38954f4d

  • SSDEEP

    3072:sr85C17IJJO6aJWkfaY8vGfKDBgbNY+JMrK+0q:k917adKSBgUr0q

Malware Config

Targets

    • Target

      6ae741e6ecf9d6bb73d81625d6c125b95dd2d99806ea764cb03bd9ae1768bba7

    • Size

      122KB

    • MD5

      1d7d4ad94ac3f0e39c1df0cec23a5858

    • SHA1

      1146bacd739ef6c5f1c68c62c0a5f6549d695bfc

    • SHA256

      6ae741e6ecf9d6bb73d81625d6c125b95dd2d99806ea764cb03bd9ae1768bba7

    • SHA512

      decae796c1ca8a07b0e70d1a36634ffa4125393e03208d384a1cba4d54d1d9b494b6fd6a18526fe3e9505795579a6ed3c1c3c1512fa3b66126a5581b38954f4d

    • SSDEEP

      3072:sr85C17IJJO6aJWkfaY8vGfKDBgbNY+JMrK+0q:k917adKSBgUr0q

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks