General
Target
Size
Sample
tmp/6065149a-4e5b-4b4f-a1e4-095f1751bf4e_1017.exe
855KB
211229-m31ddsdchj
Score
10/10
MD5
SHA1
SHA256
SHA512
521447b36c3c0b8c123e149e9aee2eb3
de9cfbd7807bcfef61790670b4e94f2c8d352ac9
02323ad7d39bea5d5e736d6a66e31840542cf2c75f265b46b501ed2452cef2ce
cc411a82c357916cd6e6fb52d34ded67c95fe4657da6a07ab3770cb11d601c8dfa28ffe0b10c66962851c22d582e789ad8334af93c5f1fa0df0a3905e571a69b
Malware Config
Targets
Target
MD5
Filesize
tmp/6065149a-4e5b-4b4f-a1e4-095f1751bf4e_1017.exe
521447b36c3c0b8c123e149e9aee2eb3
855KB
Score
10/10
SHA1
SHA256
SHA512
de9cfbd7807bcfef61790670b4e94f2c8d352ac9
02323ad7d39bea5d5e736d6a66e31840542cf2c75f265b46b501ed2452cef2ce
cc411a82c357916cd6e6fb52d34ded67c95fe4657da6a07ab3770cb11d601c8dfa28ffe0b10c66962851c22d582e789ad8334af93c5f1fa0df0a3905e571a69b
Tags
Signatures
-
Detect Neshta Payload
-
Modifies system executable filetype association
-
Neshta
Description
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
Tags
-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Description
Infostealers often target stored browser data, which can include saved credentials etc.
Tags
TTPs
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks
static1
Score
N/A
behavioral1
Score
10/10
behavioral2
Score
10/10