Overview

overview

10

Static

static

10

a6fb933900...a8.exe

windows7_x64

10

a6fb933900...a8.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6fb933900f76fbae2c7d86b969a911af62117630a664b7e01eba3fe33c0f9a8

  • Size

    278KB

  • Sample

    220124-br4qwshed6

  • MD5

    a58daa449381388ed96dd03ab5fe6daf

  • SHA1

    1092aca4f36b98d3189abd46fe21036bdd1fd05f

  • SHA256

    a6fb933900f76fbae2c7d86b969a911af62117630a664b7e01eba3fe33c0f9a8

  • SHA512

    3fe944b1282694cb05c6b0beb8b96d7eb283172ddcef58d7a53857b72aadd61f9549ff4853fed88b1f991160d0fd39c4aaee01171a7475bc82d2f9801fab2bb3

Score
10/10
neshtasodinokibipersistencespywarestealer

Malware Config

Targets

    • Target

      a6fb933900f76fbae2c7d86b969a911af62117630a664b7e01eba3fe33c0f9a8

    • Size

      278KB

    • MD5

      a58daa449381388ed96dd03ab5fe6daf

    • SHA1

      1092aca4f36b98d3189abd46fe21036bdd1fd05f

    • SHA256

      a6fb933900f76fbae2c7d86b969a911af62117630a664b7e01eba3fe33c0f9a8

    • SHA512

      3fe944b1282694cb05c6b0beb8b96d7eb283172ddcef58d7a53857b72aadd61f9549ff4853fed88b1f991160d0fd39c4aaee01171a7475bc82d2f9801fab2bb3

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks