Overview

overview

10

Static

static

10

fef0052a4e...d8.exe

windows7-x64

10

fef0052a4e...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fef0052a4e17be3940c4edc522f334c9dd7b085fa891f465fe23879ae2017dd8

  • Size

    524KB

  • Sample

    221001-wjpbfsheb6

  • MD5

    07a3f03515b7d2f748613a061db2d430

  • SHA1

    b43500cd1089165b623fab570107fcf75efb42fb

  • SHA256

    fef0052a4e17be3940c4edc522f334c9dd7b085fa891f465fe23879ae2017dd8

  • SHA512

    c40eb10f2612f3075fbd13861a1a5a7e21885a1840e4c2995a99c824ffe84a4158490a64146eab5285e0cf60554ba08be2b1a29741fd3b8ec204e39eacd6d22a

  • SSDEEP

    12288:uMAJxItExFSJxnNXx6Bk2QZPEX9GO/Di/Dr:79sSbyBRQMMT

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      fef0052a4e17be3940c4edc522f334c9dd7b085fa891f465fe23879ae2017dd8

    • Size

      524KB

    • MD5

      07a3f03515b7d2f748613a061db2d430

    • SHA1

      b43500cd1089165b623fab570107fcf75efb42fb

    • SHA256

      fef0052a4e17be3940c4edc522f334c9dd7b085fa891f465fe23879ae2017dd8

    • SHA512

      c40eb10f2612f3075fbd13861a1a5a7e21885a1840e4c2995a99c824ffe84a4158490a64146eab5285e0cf60554ba08be2b1a29741fd3b8ec204e39eacd6d22a

    • SSDEEP

      12288:uMAJxItExFSJxnNXx6Bk2QZPEX9GO/Di/Dr:79sSbyBRQMMT

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks