General

  • Target

    2025-04-15_54347443d8035aca2decdfb39c66d9fa_black-basta_elex_hijackloader_neshta

  • Size

    2.3MB

  • Sample

    250415-q3jmesywgy

  • MD5

    54347443d8035aca2decdfb39c66d9fa

  • SHA1

    e822c6934cb53280c72cbb7caa0ae52e14bddbef

  • SHA256

    41d76a0220cbb32fba814e35d806faf7a34cdb41ab5c4b4e8ff29e1fbfa9943c

  • SHA512

    7765e4c5e8ab83c74073fc4683a76c6266386cf28fb7ca347c9f96661c091c0228a2d5c4985fdc08349da35bf75b5c1eaef27c5768b43dfb912f5167994fbc63

  • SSDEEP

    49152:zd5s5fN6ZsK2MPSnxDGgKbh+8V76KcJCSMK1cX+8eQkq:pH7YoICL7fR

Malware Config

Targets

    • Target

      2025-04-15_54347443d8035aca2decdfb39c66d9fa_black-basta_elex_hijackloader_neshta

    • Size

      2.3MB

    • MD5

      54347443d8035aca2decdfb39c66d9fa

    • SHA1

      e822c6934cb53280c72cbb7caa0ae52e14bddbef

    • SHA256

      41d76a0220cbb32fba814e35d806faf7a34cdb41ab5c4b4e8ff29e1fbfa9943c

    • SHA512

      7765e4c5e8ab83c74073fc4683a76c6266386cf28fb7ca347c9f96661c091c0228a2d5c4985fdc08349da35bf75b5c1eaef27c5768b43dfb912f5167994fbc63

    • SSDEEP

      49152:zd5s5fN6ZsK2MPSnxDGgKbh+8V76KcJCSMK1cX+8eQkq:pH7YoICL7fR

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks