General

  • Target

    4a2cd8d7ef380df8701a95b9239ef68e552d97aa5a8df8ab2bae75ced5464b24.exe

  • Size

    902KB

  • Sample

    241207-dsrttsyqen

  • MD5

    9bd2622db79de50f41523f051da98512

  • SHA1

    9735d64f82a89746b7c5b07fcf43febb4ca01fc3

  • SHA256

    4a2cd8d7ef380df8701a95b9239ef68e552d97aa5a8df8ab2bae75ced5464b24

  • SHA512

    8c7b0a31e2bfbd165e3cfcebad049788c1365b2080c6c585a18e68dbbc91977a4a3780f5207ad9dfafa3e484c3ef0a0ccdfca59f546782ae1de6a803ad5b7410

  • SSDEEP

    24576:IhvvVXr99/c2W5wGCC7tZuzhQOZkxJbfv5u3dlAxaKjqbG:SvvVb990d5f7tZuzhQOZkxJbfv5u3dly

Malware Config

Targets

    • Target

      4a2cd8d7ef380df8701a95b9239ef68e552d97aa5a8df8ab2bae75ced5464b24.exe

    • Size

      902KB

    • MD5

      9bd2622db79de50f41523f051da98512

    • SHA1

      9735d64f82a89746b7c5b07fcf43febb4ca01fc3

    • SHA256

      4a2cd8d7ef380df8701a95b9239ef68e552d97aa5a8df8ab2bae75ced5464b24

    • SHA512

      8c7b0a31e2bfbd165e3cfcebad049788c1365b2080c6c585a18e68dbbc91977a4a3780f5207ad9dfafa3e484c3ef0a0ccdfca59f546782ae1de6a803ad5b7410

    • SSDEEP

      24576:IhvvVXr99/c2W5wGCC7tZuzhQOZkxJbfv5u3dlAxaKjqbG:SvvVb990d5f7tZuzhQOZkxJbfv5u3dly

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks