Overview

overview

10

Static

static

10

863e4eb6f7...7f.exe

windows7_x64

10

863e4eb6f7...7f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f

  • Size

    4.6MB

  • Sample

    220129-f6lwvadgeq

  • MD5

    a67bc7a262e48d02a2dc02b0d385c9ae

  • SHA1

    214bdf6cf66a5544d20acad597f048d6b11e08e8

  • SHA256

    863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f

  • SHA512

    b7b9fe2d90ba6a404d76f0dd8c9562ce3fb734bb8085ff68886d63face15f4378a9101d10820fd9e3ce97fda39a8c5e6a5f6f64cd23b47af6f277e58e15cd495

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f

    • Size

      4.6MB

    • MD5

      a67bc7a262e48d02a2dc02b0d385c9ae

    • SHA1

      214bdf6cf66a5544d20acad597f048d6b11e08e8

    • SHA256

      863e4eb6f70c02b8bc2a40b64422bdea66503e6ebe451f5640764237f4e4817f

    • SHA512

      b7b9fe2d90ba6a404d76f0dd8c9562ce3fb734bb8085ff68886d63face15f4378a9101d10820fd9e3ce97fda39a8c5e6a5f6f64cd23b47af6f277e58e15cd495

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks