tmp/25aeffc1-eb6f-4f51-9f76-2ddaaaeb65f2_1007.exe
General
Target
Size
Sample
tmp/25aeffc1-eb6f-4f51-9f76-2ddaaaeb65f2_1007.exe
2MB
211228-fm17escack
Score
10 /10
MD5
SHA1
SHA256
SHA512
687cb42f614773145b672ea5de18aa2c
3aa9bc7bb65d8b3cc4fb2dd11ef3603b458ead02
be4ae8c97d86406b0b6cda20d56f7a6293d99d7a6d72152fc895e23b346e55f6
a9410acc4a22af14dac93653d18543733a6453a8d8f70eaef7582c598784ef16aa02cf0cd673eebc434f736a49f2f76997e1ac6ecfa3e86114b72424932d6b75
Malware Config
Targets
Target
MD5
Filesize
tmp/25aeffc1-eb6f-4f51-9f76-2ddaaaeb65f2_1007.exe
687cb42f614773145b672ea5de18aa2c
2MB
Score
10/10
SHA1
SHA256
SHA512
3aa9bc7bb65d8b3cc4fb2dd11ef3603b458ead02
be4ae8c97d86406b0b6cda20d56f7a6293d99d7a6d72152fc895e23b346e55f6
a9410acc4a22af14dac93653d18543733a6453a8d8f70eaef7582c598784ef16aa02cf0cd673eebc434f736a49f2f76997e1ac6ecfa3e86114b72424932d6b75
Tags
Signatures
-
Detect Neshta Payload
-
Modifies system executable filetype association
-
Neshta
Description
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
Tags
-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Description
Infostealers often target stored browser data, which can include saved credentials etc.
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks