General
- Target 2_KeyWordKeeper_4.zip
- Size 352KB
- Sample260720-pk9v8act4v
- SHA256 d3e5d2815a4492d9df844819e55480af3ae1625ca153f28348e260959c50eeb9
Score
10/10
Malware Config
Targets
-
- Target KeyWordKeeper.exe
- Size 747KB
- SHA256 e8e88a3ddd132bd8913c980271f6f7aaa060b5585f65e1838decd335b3e04df7
Score10/10-
Detect Neshta payload
-
Family: Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
- Target manual (祭 ᮢ !!!).html
- Size 8KB
- SHA256 524a4161b2fb5bd961964e9139949a55aa89f6339d69dc6b2cd1e5ac46aa47c3
Score3/10
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1