General

  • Target

    fc6622fade3fdb664c6a2bed6afacae7646f73f72cb21d7c797f22e78029bc8c

  • Size

    200KB

  • Sample

    241117-m3v4nsycpe

  • MD5

    0e57dc5c5e20da65753dad8f9ed6c3c1

  • SHA1

    67947a4387b35e2692f20ead389c6a3cb39582fa

  • SHA256

    fc6622fade3fdb664c6a2bed6afacae7646f73f72cb21d7c797f22e78029bc8c

  • SHA512

    49890613744f6c991e120b8aabf2c39f62bebabd84e1cb6ca635950a536fccb66bf5f3f55284d35341369004cd05791d6e76b47e351ddd528445993c34ef5201

  • SSDEEP

    3072:sr85CuI/w/T0oqVXZMDmAxTeKIrzzv8kz/7G+nqsAQxqoXpN9/xR:k9ux/TuzzvhiwcyN9xR

Malware Config

Targets

    • Target

      fc6622fade3fdb664c6a2bed6afacae7646f73f72cb21d7c797f22e78029bc8c

    • Size

      200KB

    • MD5

      0e57dc5c5e20da65753dad8f9ed6c3c1

    • SHA1

      67947a4387b35e2692f20ead389c6a3cb39582fa

    • SHA256

      fc6622fade3fdb664c6a2bed6afacae7646f73f72cb21d7c797f22e78029bc8c

    • SHA512

      49890613744f6c991e120b8aabf2c39f62bebabd84e1cb6ca635950a536fccb66bf5f3f55284d35341369004cd05791d6e76b47e351ddd528445993c34ef5201

    • SSDEEP

      3072:sr85CuI/w/T0oqVXZMDmAxTeKIrzzv8kz/7G+nqsAQxqoXpN9/xR:k9ux/TuzzvhiwcyN9xR

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks