Overview

overview

10

Static

static

10

82fe113744...27.exe

windows7_x64

10

82fe113744...27.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82fe113744575be4819be811427615867765773a4e22bdcebe9a232680815427

  • Size

    286KB

  • Sample

    220124-b4l2lshge4

  • MD5

    b19687d5d2b1abb22d6c01be18c97830

  • SHA1

    eb9eea88999484a3386015103fe73bf45014db98

  • SHA256

    82fe113744575be4819be811427615867765773a4e22bdcebe9a232680815427

  • SHA512

    3ad332a12562ac2fc99d8f1b3a9d6c48f1bdb4c60f41ee7bc543049e03559ec11db367b001d847509fba936467b3bc21f041b34ce7d2a5b1141d01ac2e0b5a03

Score
10/10
neshtasodinokibipersistencespywarestealer

Malware Config

Targets

    • Target

      82fe113744575be4819be811427615867765773a4e22bdcebe9a232680815427

    • Size

      286KB

    • MD5

      b19687d5d2b1abb22d6c01be18c97830

    • SHA1

      eb9eea88999484a3386015103fe73bf45014db98

    • SHA256

      82fe113744575be4819be811427615867765773a4e22bdcebe9a232680815427

    • SHA512

      3ad332a12562ac2fc99d8f1b3a9d6c48f1bdb4c60f41ee7bc543049e03559ec11db367b001d847509fba936467b3bc21f041b34ce7d2a5b1141d01ac2e0b5a03

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks