General

  • Target

    71226231ab10dd8268c99ccbfbd59cef6b56721a257484d94bcfb2a50bbbeef1N.exe

  • Size

    224KB

  • Sample

    241117-v15t4ayreq

  • MD5

    22219d8c50333511a3554e7bbc004220

  • SHA1

    f55d69514ca39145841a13461a7be135b992973e

  • SHA256

    71226231ab10dd8268c99ccbfbd59cef6b56721a257484d94bcfb2a50bbbeef1

  • SHA512

    69fb993702e02441eafed988c8d70504e39393f04ee0aeedf45fb032d9fe20b2d9449d29806a89e61af701962c09bbe65560d0df425c0f5f1f53f336734c0d4b

  • SSDEEP

    3072:sr85Cdv/jVKWvtx/YSWW3H8atM8T9EBqZT//brvf2ZYdgVhO8k:k9pJYS7hWqN///vf2GeXu

Malware Config

Targets

    • Target

      71226231ab10dd8268c99ccbfbd59cef6b56721a257484d94bcfb2a50bbbeef1N.exe

    • Size

      224KB

    • MD5

      22219d8c50333511a3554e7bbc004220

    • SHA1

      f55d69514ca39145841a13461a7be135b992973e

    • SHA256

      71226231ab10dd8268c99ccbfbd59cef6b56721a257484d94bcfb2a50bbbeef1

    • SHA512

      69fb993702e02441eafed988c8d70504e39393f04ee0aeedf45fb032d9fe20b2d9449d29806a89e61af701962c09bbe65560d0df425c0f5f1f53f336734c0d4b

    • SSDEEP

      3072:sr85Cdv/jVKWvtx/YSWW3H8atM8T9EBqZT//brvf2ZYdgVhO8k:k9pJYS7hWqN///vf2GeXu

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks