Overview

overview

10

Static

static

1

New Inquiry.exe

windows7_x64

10

New Inquiry.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New Inquiry.exe

  • Size

    247KB

  • Sample

    211110-raecnshbc6

  • MD5

    905db5df8d7a31ccd2c15fd5b90d3cd2

  • SHA1

    06ec98964ce0e4d64cfcf68b579fa28be7207a15

  • SHA256

    997d1ffb13955190f89d7d6c712af1d2b8988cffdda524963f0963b4eb761d5a

  • SHA512

    de02d56b22651e80442d06d4ad2d10a209e261cb048139f6d8c1822783cdee3f365186bfae4901549da51a9269af1daa9929ea7eb114a2bb09406975d5277142

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      New Inquiry.exe

    • Size

      247KB

    • MD5

      905db5df8d7a31ccd2c15fd5b90d3cd2

    • SHA1

      06ec98964ce0e4d64cfcf68b579fa28be7207a15

    • SHA256

      997d1ffb13955190f89d7d6c712af1d2b8988cffdda524963f0963b4eb761d5a

    • SHA512

      de02d56b22651e80442d06d4ad2d10a209e261cb048139f6d8c1822783cdee3f365186bfae4901549da51a9269af1daa9929ea7eb114a2bb09406975d5277142

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta Payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks