Overview

overview

10

Static

static

1

62,500-pay......exe

windows7_x64

10

62,500-pay......exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    62,500-payment............exe

  • Size

    275KB

  • Sample

    211103-q6egwadhf8

  • MD5

    6f9a435a8d01482b3a8fbdcd361f277b

  • SHA1

    fa6abbaa9eab006f1d6b464a29c11ca88c35d8bb

  • SHA256

    234de00e0baf6411e8b774d7821ce00a06ae9d09599f4dbc32b1367493130707

  • SHA512

    b310ae7d0c069c93c7843d0374815c923e5bb970d133813c0a302e102f36368ff46f7d0d599028c226bd4f6ab8df52066ddf40b73a0f128b6ced55f84e1b2579

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      62,500-payment............exe

    • Size

      275KB

    • MD5

      6f9a435a8d01482b3a8fbdcd361f277b

    • SHA1

      fa6abbaa9eab006f1d6b464a29c11ca88c35d8bb

    • SHA256

      234de00e0baf6411e8b774d7821ce00a06ae9d09599f4dbc32b1367493130707

    • SHA512

      b310ae7d0c069c93c7843d0374815c923e5bb970d133813c0a302e102f36368ff46f7d0d599028c226bd4f6ab8df52066ddf40b73a0f128b6ced55f84e1b2579

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta Payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks