Overview

overview

10

Static

static

10

32f84aa800...88.exe

windows7_x64

10

32f84aa800...88.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32f84aa8001735c4f774e65ad2afac74733e3a5e6ba54bb36603d8cb8e9ce188

  • Size

    1.4MB

  • Sample

    220222-gaznhaebgp

  • MD5

    486e87262193316e8b12caa26e2c0fb7

  • SHA1

    1d5687dec2039d0d127ea34611bdc6ec8efbc099

  • SHA256

    32f84aa8001735c4f774e65ad2afac74733e3a5e6ba54bb36603d8cb8e9ce188

  • SHA512

    7456b64eccf71486d5d4f8943bc25c3f6169ab1ce4b43c24716e25345e15d69e86c50d9c1bc149227a504aa10be7a9c8aefbf69aa793b57614fdf4590d45e39e

Score
10/10
neshtapersistencespyware

Malware Config

Targets

    • Target

      32f84aa8001735c4f774e65ad2afac74733e3a5e6ba54bb36603d8cb8e9ce188

    • Size

      1.4MB

    • MD5

      486e87262193316e8b12caa26e2c0fb7

    • SHA1

      1d5687dec2039d0d127ea34611bdc6ec8efbc099

    • SHA256

      32f84aa8001735c4f774e65ad2afac74733e3a5e6ba54bb36603d8cb8e9ce188

    • SHA512

      7456b64eccf71486d5d4f8943bc25c3f6169ab1ce4b43c24716e25345e15d69e86c50d9c1bc149227a504aa10be7a9c8aefbf69aa793b57614fdf4590d45e39e

    Score
    10/10
    neshtapersistencespyware

    • Detect Neshta Payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks