General

  • Target

    43a20b8ec55018f21299de992dd78ff354c4fce604e894e50b5b1432e39d27e0N

  • Size

    152KB

  • Sample

    241029-czacpa1jd1

  • MD5

    14a032b60d2a38ee9dca3e8ae9b8c950

  • SHA1

    46151c301f2de69532b138be06f81fe17191e3d7

  • SHA256

    43a20b8ec55018f21299de992dd78ff354c4fce604e894e50b5b1432e39d27e0

  • SHA512

    df276981966b482c482360fdcc3a579ddf465f02d8c21657db83c99c0bd24ff741f6dc5f598226bf3d97bbee6b16f48dd7e7bc1356dff6bc6c036cdbe62379ff

  • SSDEEP

    3072:sr85CP13ANXPLJ+m3I2X1OV76pC/3QSXpajcz0M656T8egfa:k9PSPAgEcA3bZaj+CC

Malware Config

Targets

    • Target

      43a20b8ec55018f21299de992dd78ff354c4fce604e894e50b5b1432e39d27e0N

    • Size

      152KB

    • MD5

      14a032b60d2a38ee9dca3e8ae9b8c950

    • SHA1

      46151c301f2de69532b138be06f81fe17191e3d7

    • SHA256

      43a20b8ec55018f21299de992dd78ff354c4fce604e894e50b5b1432e39d27e0

    • SHA512

      df276981966b482c482360fdcc3a579ddf465f02d8c21657db83c99c0bd24ff741f6dc5f598226bf3d97bbee6b16f48dd7e7bc1356dff6bc6c036cdbe62379ff

    • SSDEEP

      3072:sr85CP13ANXPLJ+m3I2X1OV76pC/3QSXpajcz0M656T8egfa:k9PSPAgEcA3bZaj+CC

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks