General

  • Target

    e571385a4311e5cf965252ad4d20831113b5ce9f6e55544c91218eb77e860393.exe

  • Size

    2.0MB

  • Sample

    241217-afwqgavngr

  • MD5

    4aa040b72b62423ee7de3f879ca7438a

  • SHA1

    66b51e78237e75cc88c9b048f363290100d5846e

  • SHA256

    e571385a4311e5cf965252ad4d20831113b5ce9f6e55544c91218eb77e860393

  • SHA512

    c49625b032636f5bddc33b4b99ccbefb4c59f756ecd824b7db9bab8f5f96c17dd681bcc0a380d77c8539b5af9283d7cae5379cd72931a12beedf01206386a028

  • SSDEEP

    24576:X/Bq8qiAVKxZn27hSDiPzN5O7kXvk/0eQV:X/BFmTPJ5O7Ak/0eQV

Malware Config

Targets

    • Target

      e571385a4311e5cf965252ad4d20831113b5ce9f6e55544c91218eb77e860393.exe

    • Size

      2.0MB

    • MD5

      4aa040b72b62423ee7de3f879ca7438a

    • SHA1

      66b51e78237e75cc88c9b048f363290100d5846e

    • SHA256

      e571385a4311e5cf965252ad4d20831113b5ce9f6e55544c91218eb77e860393

    • SHA512

      c49625b032636f5bddc33b4b99ccbefb4c59f756ecd824b7db9bab8f5f96c17dd681bcc0a380d77c8539b5af9283d7cae5379cd72931a12beedf01206386a028

    • SSDEEP

      24576:X/Bq8qiAVKxZn27hSDiPzN5O7kXvk/0eQV:X/BFmTPJ5O7Ak/0eQV

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks