General

  • Target

    ef52eeb9654b9b68aedea60d476a9b150d1fcd9a3dc1b97efb943fa410fa36d2.exe

  • Size

    669KB

  • Sample

    241218-fk5rtstpes

  • MD5

    205f4c398ab8c56dc659ba3ea4966ef0

  • SHA1

    8d13e6d38dbe4c7ca12cc2ea08e09f1046426acc

  • SHA256

    ef52eeb9654b9b68aedea60d476a9b150d1fcd9a3dc1b97efb943fa410fa36d2

  • SHA512

    b3a69cc4a116375b6f5ce51844dca774858e5021901503b7064fa1d2af03537b6b048426f66fd9c966196c3d0dec953d0f022710903f7c6189ef82e23bac95ed

  • SSDEEP

    6144:k9FCHFhNi2UziUPeWqlRoI7WVWv3603SqeOjo8MgLr8ofi:6CHT42wi1FRT7Tvq03S1OjMgPi

Malware Config

Targets

    • Target

      ef52eeb9654b9b68aedea60d476a9b150d1fcd9a3dc1b97efb943fa410fa36d2.exe

    • Size

      669KB

    • MD5

      205f4c398ab8c56dc659ba3ea4966ef0

    • SHA1

      8d13e6d38dbe4c7ca12cc2ea08e09f1046426acc

    • SHA256

      ef52eeb9654b9b68aedea60d476a9b150d1fcd9a3dc1b97efb943fa410fa36d2

    • SHA512

      b3a69cc4a116375b6f5ce51844dca774858e5021901503b7064fa1d2af03537b6b048426f66fd9c966196c3d0dec953d0f022710903f7c6189ef82e23bac95ed

    • SSDEEP

      6144:k9FCHFhNi2UziUPeWqlRoI7WVWv3603SqeOjo8MgLr8ofi:6CHT42wi1FRT7Tvq03S1OjMgPi

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks