General

  • Target

    696c72060da9cf8c0f0d6e3c63542b659092c5d63039fb44c551cbc37fdae9cdN.exe

  • Size

    144KB

  • Sample

    241206-sjjt7ayqgr

  • MD5

    9d42728a55620e51034b260c055e4c60

  • SHA1

    07ec5d87c6e52d77cc6aefeea5f7f48478bd3a84

  • SHA256

    696c72060da9cf8c0f0d6e3c63542b659092c5d63039fb44c551cbc37fdae9cd

  • SHA512

    35daddb5421389b310552564f9efad9d07d630b07075a8e0954d283ae68b5cc42c8d549c66aea5c80b806ddd7f40a2228220afb76eba48bbcd15f39525415f1f

  • SSDEEP

    1536:JxqjQ+P04wsmJC776VocmQ3Tj9wc8ACrv4QKOhwne/7n8wbwjRfNlNnsEBw6civ:sr85CX6V73CUCrv4zOwezkRfL3cK

Malware Config

Targets

    • Target

      696c72060da9cf8c0f0d6e3c63542b659092c5d63039fb44c551cbc37fdae9cdN.exe

    • Size

      144KB

    • MD5

      9d42728a55620e51034b260c055e4c60

    • SHA1

      07ec5d87c6e52d77cc6aefeea5f7f48478bd3a84

    • SHA256

      696c72060da9cf8c0f0d6e3c63542b659092c5d63039fb44c551cbc37fdae9cd

    • SHA512

      35daddb5421389b310552564f9efad9d07d630b07075a8e0954d283ae68b5cc42c8d549c66aea5c80b806ddd7f40a2228220afb76eba48bbcd15f39525415f1f

    • SSDEEP

      1536:JxqjQ+P04wsmJC776VocmQ3Tj9wc8ACrv4QKOhwne/7n8wbwjRfNlNnsEBw6civ:sr85CX6V73CUCrv4zOwezkRfL3cK

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks