General

  • Target

    87fe4ea3481442313c930924682bf69896bef3ea09ebbe5228aa537ef9c815b5

  • Size

    319KB

  • Sample

    241215-ybkdmswmbl

  • MD5

    2fd75acf39b68cbdae7373e757e808d4

  • SHA1

    73204840cee1e8d2d7ed8c91210799df3c7b1fe1

  • SHA256

    87fe4ea3481442313c930924682bf69896bef3ea09ebbe5228aa537ef9c815b5

  • SHA512

    40215259f2bbf65d010774c5049dbc9ddc85a4fd66500825071dd54719d740ba6c3ccbd84d0f98eb1d73650a8a508637a517ae65fe3758ddf27ace315e0b9e1f

  • SSDEEP

    3072:sr85CUT4EDurMC9r7BWPJER27aQDtiIx9tdMgKbXooE3Gr85Cxr85C:k9UTJurMCaRu27qIx3dIb4o9N9

Malware Config

Targets

    • Target

      87fe4ea3481442313c930924682bf69896bef3ea09ebbe5228aa537ef9c815b5

    • Size

      319KB

    • MD5

      2fd75acf39b68cbdae7373e757e808d4

    • SHA1

      73204840cee1e8d2d7ed8c91210799df3c7b1fe1

    • SHA256

      87fe4ea3481442313c930924682bf69896bef3ea09ebbe5228aa537ef9c815b5

    • SHA512

      40215259f2bbf65d010774c5049dbc9ddc85a4fd66500825071dd54719d740ba6c3ccbd84d0f98eb1d73650a8a508637a517ae65fe3758ddf27ace315e0b9e1f

    • SSDEEP

      3072:sr85CUT4EDurMC9r7BWPJER27aQDtiIx9tdMgKbXooE3Gr85Cxr85C:k9UTJurMCaRu27qIx3dIb4o9N9

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks