General

  • Target

    2025-03-30_b1935d72c782e99b952a77a794bd3863_black-basta_neshta

  • Size

    8.8MB

  • Sample

    250330-lpcvhayjs3

  • MD5

    b1935d72c782e99b952a77a794bd3863

  • SHA1

    43e74172a8ee8b4fc91f35099cf2539b2b214d49

  • SHA256

    d29b3cde899441c18806c53bec3f2324f53ffb1c27476ff05484d93d11f4b240

  • SHA512

    9cf08a181d12955d79f9d29db28e3b67bfadede397cd691976f0de147242179f2a178015bb279d03ae55614edd1183bd44569cb6127ef109693a7bb2a501b77b

  • SSDEEP

    98304:oadckjOlvicJF0L9SxId5vZb/F+lopmme0UCJgRfvqcxxhtbfGQe:RPvS0hSWZ5eXggnLXbO9

Malware Config

Targets

    • Target

      2025-03-30_b1935d72c782e99b952a77a794bd3863_black-basta_neshta

    • Size

      8.8MB

    • MD5

      b1935d72c782e99b952a77a794bd3863

    • SHA1

      43e74172a8ee8b4fc91f35099cf2539b2b214d49

    • SHA256

      d29b3cde899441c18806c53bec3f2324f53ffb1c27476ff05484d93d11f4b240

    • SHA512

      9cf08a181d12955d79f9d29db28e3b67bfadede397cd691976f0de147242179f2a178015bb279d03ae55614edd1183bd44569cb6127ef109693a7bb2a501b77b

    • SSDEEP

      98304:oadckjOlvicJF0L9SxId5vZb/F+lopmme0UCJgRfvqcxxhtbfGQe:RPvS0hSWZ5eXggnLXbO9

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks