General

  • Target

    052432b4467e72bcb78c5277c1a7650f8ea722a36e43768126a480f76f78f4bbN.exe

  • Size

    124KB

  • Sample

    241207-2zvq3atpdj

  • MD5

    11dcc28ca8d77d7a4eba53e6b59c0990

  • SHA1

    14ab556e7d46660d2fae9b2245e34d92584eea28

  • SHA256

    052432b4467e72bcb78c5277c1a7650f8ea722a36e43768126a480f76f78f4bb

  • SHA512

    405b913064e6a755cd2250c8030dea71e2521ec8867aa2a0eb9bc7be7cb88c2ee69221d094d51a10e594e4aa9c961b39001a8787507df4aaec2d73451958ea8a

  • SSDEEP

    1536:JxqjQ+P04wsmJCx8iAfFFnC7oL6YtdDdWbl3CmL7FQUFnC7TQ+P04wsmJC:sr85CeD/so2YtpdWbl3tL9sTr85C

Malware Config

Targets

    • Target

      052432b4467e72bcb78c5277c1a7650f8ea722a36e43768126a480f76f78f4bbN.exe

    • Size

      124KB

    • MD5

      11dcc28ca8d77d7a4eba53e6b59c0990

    • SHA1

      14ab556e7d46660d2fae9b2245e34d92584eea28

    • SHA256

      052432b4467e72bcb78c5277c1a7650f8ea722a36e43768126a480f76f78f4bb

    • SHA512

      405b913064e6a755cd2250c8030dea71e2521ec8867aa2a0eb9bc7be7cb88c2ee69221d094d51a10e594e4aa9c961b39001a8787507df4aaec2d73451958ea8a

    • SSDEEP

      1536:JxqjQ+P04wsmJCx8iAfFFnC7oL6YtdDdWbl3CmL7FQUFnC7TQ+P04wsmJC:sr85CeD/so2YtpdWbl3tL9sTr85C

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks