General

  • Target

    da2e2b1ecfe6e4b3df53486af2b7c5ad02e2869d09468a07f4f822d718df6a18.exe

  • Size

    2.2MB

  • Sample

    241230-2pvnbavndz

  • MD5

    558a1417b7da0f1a183fd2f357d2099b

  • SHA1

    c50fc7f5cd1d26bd5a98f28acc52f8b085856f43

  • SHA256

    da2e2b1ecfe6e4b3df53486af2b7c5ad02e2869d09468a07f4f822d718df6a18

  • SHA512

    02450bc314f5ef83e2588e18f6f1c8a7d775a6bb8578bfbffeb05593e45b62866296db07b21aff568f06a2e44e8bc59af3196d5f1e074493440a714e71eee876

  • SSDEEP

    49152:6xl9emW1uMSXYSgvQqgsHtD1M1px4k37pH61LJOw4c:P5Sb1px4kro19f

Malware Config

Targets

    • Target

      da2e2b1ecfe6e4b3df53486af2b7c5ad02e2869d09468a07f4f822d718df6a18.exe

    • Size

      2.2MB

    • MD5

      558a1417b7da0f1a183fd2f357d2099b

    • SHA1

      c50fc7f5cd1d26bd5a98f28acc52f8b085856f43

    • SHA256

      da2e2b1ecfe6e4b3df53486af2b7c5ad02e2869d09468a07f4f822d718df6a18

    • SHA512

      02450bc314f5ef83e2588e18f6f1c8a7d775a6bb8578bfbffeb05593e45b62866296db07b21aff568f06a2e44e8bc59af3196d5f1e074493440a714e71eee876

    • SSDEEP

      49152:6xl9emW1uMSXYSgvQqgsHtD1M1px4k37pH61LJOw4c:P5Sb1px4kro19f

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks