Overview

overview

10

Static

static

10

3a0ac18ca3...7b.exe

windows7_x64

10

3a0ac18ca3...7b.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a0ac18ca391cdf622b13a415c2f3666d0493d42e4db50a49e397e318c2eb27b

  • Size

    756KB

  • Sample

    220129-lnl2sahhd8

  • MD5

    9f8e178a38f1dd82bffc1f355ea267de

  • SHA1

    2334987b49fa6a0c7c6e3bdc0dd1dcb9d3f1effc

  • SHA256

    3a0ac18ca391cdf622b13a415c2f3666d0493d42e4db50a49e397e318c2eb27b

  • SHA512

    f0abfe970b897cc4b594af264aa9f721e3b29d7e2b235fc06a2392a4a582f8afe03f257e48791e0b6c08aa2ade3f794d815657234f8d465efb97545b24ea5df1

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      3a0ac18ca391cdf622b13a415c2f3666d0493d42e4db50a49e397e318c2eb27b

    • Size

      756KB

    • MD5

      9f8e178a38f1dd82bffc1f355ea267de

    • SHA1

      2334987b49fa6a0c7c6e3bdc0dd1dcb9d3f1effc

    • SHA256

      3a0ac18ca391cdf622b13a415c2f3666d0493d42e4db50a49e397e318c2eb27b

    • SHA512

      f0abfe970b897cc4b594af264aa9f721e3b29d7e2b235fc06a2392a4a582f8afe03f257e48791e0b6c08aa2ade3f794d815657234f8d465efb97545b24ea5df1

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks