General

  • Target

    c435fd7bc01c08e4b9c7bed66ccec57d18cf965e15760b3ee8261f951da3d613.exe

  • Size

    1.2MB

  • Sample

    241118-m9tt7averd

  • MD5

    26beb9493096be6aa62c849bbe2cb329

  • SHA1

    1a4f72a98b43d1aae9b3af9079765232962920f2

  • SHA256

    c435fd7bc01c08e4b9c7bed66ccec57d18cf965e15760b3ee8261f951da3d613

  • SHA512

    263309fefc0f8d84eeea5804b7b947e167e67df59394f89de0d97f5d85d0f7e072e8e9d22565c5414b44ad45dbd0fed167ff8cbca9ab6021606842538e33d4ff

  • SSDEEP

    24576:uADsBNONtwA7ULZmwxsg5tjNPEg/EcyLyEsUvbN1i:lYBNOoWUZmwx5n11yL9sUvb/i

Malware Config

Targets

    • Target

      c435fd7bc01c08e4b9c7bed66ccec57d18cf965e15760b3ee8261f951da3d613.exe

    • Size

      1.2MB

    • MD5

      26beb9493096be6aa62c849bbe2cb329

    • SHA1

      1a4f72a98b43d1aae9b3af9079765232962920f2

    • SHA256

      c435fd7bc01c08e4b9c7bed66ccec57d18cf965e15760b3ee8261f951da3d613

    • SHA512

      263309fefc0f8d84eeea5804b7b947e167e67df59394f89de0d97f5d85d0f7e072e8e9d22565c5414b44ad45dbd0fed167ff8cbca9ab6021606842538e33d4ff

    • SSDEEP

      24576:uADsBNONtwA7ULZmwxsg5tjNPEg/EcyLyEsUvbN1i:lYBNOoWUZmwx5n11yL9sUvb/i

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks