Overview

overview

10

Static

static

1

New Inquiry.exe

windows7_x64

10

New Inquiry.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    New PO#-010-240.zip

  • Size

    233KB

  • Sample

    211110-xxxqesaba7

  • MD5

    08d6c2ac9323a6c71be7d6380528cad7

  • SHA1

    768e69023df397e3e3119d3fe1b9951df2ec8aaa

  • SHA256

    cc54829cbec8d75c6c2adc7e77b252dd9a3975417c8871ec68d324656e8e2e37

  • SHA512

    c281bce37e4bfce1cb3d7039aa09ff3575e3cd3b13569d948d3392023a8a5abb4aa482562de7ba2f847475483a6f6e8ba6c8a3c1e2dea2380c37a9648281c09e

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      New Inquiry.exe

    • Size

      247KB

    • MD5

      905db5df8d7a31ccd2c15fd5b90d3cd2

    • SHA1

      06ec98964ce0e4d64cfcf68b579fa28be7207a15

    • SHA256

      997d1ffb13955190f89d7d6c712af1d2b8988cffdda524963f0963b4eb761d5a

    • SHA512

      de02d56b22651e80442d06d4ad2d10a209e261cb048139f6d8c1822783cdee3f365186bfae4901549da51a9269af1daa9929ea7eb114a2bb09406975d5277142

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta Payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks