Overview

overview

10

Static

static

10

3b10978c02...7a.exe

windows7-x64

10

3b10978c02...7a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b10978c0266d0ce9de63361b427117a

  • Size

    586KB

  • Sample

    220920-vkrbrseab2

  • MD5

    3b10978c0266d0ce9de63361b427117a

  • SHA1

    47f2e9ca3c71ad001d176e43ead92e7473f088c7

  • SHA256

    95d139480818083ccfbacde06e5788218452f007f7befc76f975b013e7217fde

  • SHA512

    eb71e4c9002160e3a7ca458e8f6c1449e1253141b826ba05f8e2f7baf8c60978851f745f21121d37d0d6bacf2cfca2dc4bdd5c8e98aee89c6aa23ad98651a553

  • SSDEEP

    12288:h7d4Mcp7IJfKECTsFzQt+JrPGr7zMgF9YTaSenaUepaUepaS7W:gMcOJpCTGzQt+YQE9oaSYaUmaUmaz

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      3b10978c0266d0ce9de63361b427117a

    • Size

      586KB

    • MD5

      3b10978c0266d0ce9de63361b427117a

    • SHA1

      47f2e9ca3c71ad001d176e43ead92e7473f088c7

    • SHA256

      95d139480818083ccfbacde06e5788218452f007f7befc76f975b013e7217fde

    • SHA512

      eb71e4c9002160e3a7ca458e8f6c1449e1253141b826ba05f8e2f7baf8c60978851f745f21121d37d0d6bacf2cfca2dc4bdd5c8e98aee89c6aa23ad98651a553

    • SSDEEP

      12288:h7d4Mcp7IJfKECTsFzQt+JrPGr7zMgF9YTaSenaUepaUepaS7W:gMcOJpCTGzQt+YQE9oaSYaUmaUmaz

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks