Overview

overview

10

Static

static

10

2a45821cae...85.exe

windows7_x64

10

2a45821cae...85.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a45821cae914aa4542b87c4fcd91017b4d46c41d5b1fbd9d012e1a74ad79e85

  • Size

    428KB

  • Sample

    220524-v964hsfgbp

  • MD5

    bdfee2dd635bbe47650d38f9ecbb3816

  • SHA1

    910557b2baaa5b8a2c749931990cf50c502f0730

  • SHA256

    2a45821cae914aa4542b87c4fcd91017b4d46c41d5b1fbd9d012e1a74ad79e85

  • SHA512

    8d221ee3adab5668319dd67f5fa6d6abcbe9e18df122f8c3f2dce7ddfcbacb754a1c57620250aae049922fed7ede8cabb87f14e2f146b6d6c85cef18b729f013

Score
10/10
neshtapersistencespyware

Malware Config

Targets

    • Target

      2a45821cae914aa4542b87c4fcd91017b4d46c41d5b1fbd9d012e1a74ad79e85

    • Size

      428KB

    • MD5

      bdfee2dd635bbe47650d38f9ecbb3816

    • SHA1

      910557b2baaa5b8a2c749931990cf50c502f0730

    • SHA256

      2a45821cae914aa4542b87c4fcd91017b4d46c41d5b1fbd9d012e1a74ad79e85

    • SHA512

      8d221ee3adab5668319dd67f5fa6d6abcbe9e18df122f8c3f2dce7ddfcbacb754a1c57620250aae049922fed7ede8cabb87f14e2f146b6d6c85cef18b729f013

    Score
    10/10
    neshtapersistencespyware

    • Detect Neshta Payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks