Overview

overview

10

Static

static

10

4d5200e694...80.exe

windows7-x64

10

4d5200e694...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d5200e694b15456018b87a8235fd0de2dfdac4977fee431e0923ef997027d80

  • Size

    40KB

  • Sample

    221001-wketeahec8

  • MD5

    54ce9ef4355a789e4b8b9551c5d961b0

  • SHA1

    cd1544b0d9396b49a1e27e17dfc6fac24221456d

  • SHA256

    4d5200e694b15456018b87a8235fd0de2dfdac4977fee431e0923ef997027d80

  • SHA512

    2d4b906741682a71f8d19290fecb1ae9dae697390b6e21b6adfec537d6e4b06bf3ac88d60f65efb3c382db074e14bf5731d9c533f3b185d264d41242946fff68

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      4d5200e694b15456018b87a8235fd0de2dfdac4977fee431e0923ef997027d80

    • Size

      40KB

    • MD5

      54ce9ef4355a789e4b8b9551c5d961b0

    • SHA1

      cd1544b0d9396b49a1e27e17dfc6fac24221456d

    • SHA256

      4d5200e694b15456018b87a8235fd0de2dfdac4977fee431e0923ef997027d80

    • SHA512

      2d4b906741682a71f8d19290fecb1ae9dae697390b6e21b6adfec537d6e4b06bf3ac88d60f65efb3c382db074e14bf5731d9c533f3b185d264d41242946fff68

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks