General

  • Target

    d1a4a9b2476e1b017991cf266e655a98c18250515baa16c600004351087459e8N.exe

  • Size

    2.3MB

  • Sample

    250102-k9fapavpft

  • MD5

    c33701f08308f00c82bfd32bd2b88ee0

  • SHA1

    111af088c2b84ec41a56ef9d21c5395b4e2a4313

  • SHA256

    d1a4a9b2476e1b017991cf266e655a98c18250515baa16c600004351087459e8

  • SHA512

    320d389d46a027c609e85eeb13405441ec5abe967b65bc057745974e37cfb81dcff77fab8f46d6e9c712c3452d74d04771ad47f532d1c751758d700e56f5fe11

  • SSDEEP

    24576:lz6LNgscVMffezn99I3ZkkkkG2qBzlIXKlIXhlIXclIXklIXalIXJ22tHgVQasHH:1x1MfGo5QHSEKh3N8

Malware Config

Targets

    • Target

      d1a4a9b2476e1b017991cf266e655a98c18250515baa16c600004351087459e8N.exe

    • Size

      2.3MB

    • MD5

      c33701f08308f00c82bfd32bd2b88ee0

    • SHA1

      111af088c2b84ec41a56ef9d21c5395b4e2a4313

    • SHA256

      d1a4a9b2476e1b017991cf266e655a98c18250515baa16c600004351087459e8

    • SHA512

      320d389d46a027c609e85eeb13405441ec5abe967b65bc057745974e37cfb81dcff77fab8f46d6e9c712c3452d74d04771ad47f532d1c751758d700e56f5fe11

    • SSDEEP

      24576:lz6LNgscVMffezn99I3ZkkkkG2qBzlIXKlIXhlIXclIXklIXalIXJ22tHgVQasHH:1x1MfGo5QHSEKh3N8

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks