General

  • Target

    93fc760e9d53b499f6a58b3c748d4d96506c8c22184099bbe00890eb1c00bf1cN.exe

  • Size

    1.2MB

  • Sample

    241218-eyhnsaspfx

  • MD5

    27af5b935d4835c65317991b32830990

  • SHA1

    c40c4018a7595f513fa4a91153db0c3d41751dae

  • SHA256

    93fc760e9d53b499f6a58b3c748d4d96506c8c22184099bbe00890eb1c00bf1c

  • SHA512

    b99230c599ce3c127d0595b0d9e5ce53f72a166c598ef99447db34ffddccdff3c070473dcbeef2c227053a0dd1af3a1b898ad877daed12f7441772f9d171e9ed

  • SSDEEP

    24576:YpYjcVMUGBUBXugzOA21TYGHTA+J3pcna:aYjcV9XugV21EGzN59

Malware Config

Targets

    • Target

      93fc760e9d53b499f6a58b3c748d4d96506c8c22184099bbe00890eb1c00bf1cN.exe

    • Size

      1.2MB

    • MD5

      27af5b935d4835c65317991b32830990

    • SHA1

      c40c4018a7595f513fa4a91153db0c3d41751dae

    • SHA256

      93fc760e9d53b499f6a58b3c748d4d96506c8c22184099bbe00890eb1c00bf1c

    • SHA512

      b99230c599ce3c127d0595b0d9e5ce53f72a166c598ef99447db34ffddccdff3c070473dcbeef2c227053a0dd1af3a1b898ad877daed12f7441772f9d171e9ed

    • SSDEEP

      24576:YpYjcVMUGBUBXugzOA21TYGHTA+J3pcna:aYjcV9XugV21EGzN59

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks