General
-
Target
0c5bef12a9a37a8166_20518704630.zip
-
Size
62KB
-
Sample
241226-25c37svjgr
-
MD5
af3a04ba93115c5c33669d454f815151
-
SHA1
140e5be9d381ed022716c7c1f9fe5d793017cf8a
-
SHA256
0d23e39580276318c99cb3482f0173fa5a15acda934f2c6a17fb56a3ad6c130c
-
SHA512
fb8d8622910ea5fc9a1c1d59910a892135da3242e687461d00f29109ebe54ff095bf4920189bce2e8b1f64ea6b0db3fb4af34cba97450343c3f143a0729c39e6
-
SSDEEP
1536:liWe38B4bqeti8eEjT0QY09zL/74+1b8Hhtrp9ARp/aQj:oqeo+jTdYu774+14+Tfj
Malware Config
Targets
-
-
Target
0c5bef12a9a37a8166d1cf10150b7bd4668bcd706221d08b1d11297761e09956
-
Size
129KB
-
MD5
122abae4ab8d58475504bc4af1f67cd4
-
SHA1
08fc9e64791d5eec7691d630a46b16d74043b18f
-
SHA256
0c5bef12a9a37a8166d1cf10150b7bd4668bcd706221d08b1d11297761e09956
-
SHA512
082b84786885c273beda19e5ad212d2e636a4c325355d4b11e3a36ba550e08fc26e788b162b9f56c8f9c61aea314e7df71881d248b0d0e33ee84eb4ff09b9579
-
SSDEEP
1536:JxqjQ+P04wsmJC/rmK6C6yAVK7qjh3rmKPNOYoUfB8Q7IY526s8nfs8s8nfsq/:sr85C/qXyMtjZqMNOYNNEPq/
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-