Overview

overview

10

Static

static

10

fcfea317a0...16.exe

windows7-x64

10

fcfea317a0...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fcfea317a0cb315cb6a99db1facb7f099a6f5966685835791848d63295471316

  • Size

    331KB

  • Sample

    221001-wjp8raheb7

  • MD5

    06a1ff466c12643060a9378cd51ca7c0

  • SHA1

    d89c51b158fa2a67eaeb0111456292e6a6f73a89

  • SHA256

    fcfea317a0cb315cb6a99db1facb7f099a6f5966685835791848d63295471316

  • SHA512

    73b2c7a01e55d3b1df03b7f36c04f4cc1e233a180a4369cbb69f7ca73c5a00120b4230980b0fd9ab0cd4ac565bc6dff8194482dbb3b1e3d501a2362469b279d1

  • SSDEEP

    6144:k9ZiIeqZUKRm1J0XhWqoDTUvaBMifp2BRvEmE9:UiIeNWiJ0XhWl0vKTiRvEm

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      fcfea317a0cb315cb6a99db1facb7f099a6f5966685835791848d63295471316

    • Size

      331KB

    • MD5

      06a1ff466c12643060a9378cd51ca7c0

    • SHA1

      d89c51b158fa2a67eaeb0111456292e6a6f73a89

    • SHA256

      fcfea317a0cb315cb6a99db1facb7f099a6f5966685835791848d63295471316

    • SHA512

      73b2c7a01e55d3b1df03b7f36c04f4cc1e233a180a4369cbb69f7ca73c5a00120b4230980b0fd9ab0cd4ac565bc6dff8194482dbb3b1e3d501a2362469b279d1

    • SSDEEP

      6144:k9ZiIeqZUKRm1J0XhWqoDTUvaBMifp2BRvEmE9:UiIeNWiJ0XhWl0vKTiRvEm

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks