Overview

overview

10

Static

static

10

0da5d92fec...ec.exe

windows7-x64

10

0da5d92fec...ec.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0da5d92fecfd04b6a99d13215ff36bbf56386a18edad294e094df9d13f44dbec

  • Size

    40KB

  • Sample

    221001-wkmh9ahed4

  • MD5

    73be835092e39cf113ac1deff03e9170

  • SHA1

    d8815aa8cebdc9b092f42bd0be9dcacc29ebd079

  • SHA256

    0da5d92fecfd04b6a99d13215ff36bbf56386a18edad294e094df9d13f44dbec

  • SHA512

    9b00623626aac5e04b476d005e9b08a9911ed2944765dab8b63d62ce18461f910d8f3c5c48444302b1f3ab53efaab03be2449fe658629015783c513bed301ba8

  • SSDEEP

    768:8yxqjQl/EMQt4Oei7RwsHxyP7nbmzOQdJ/81DU:7xqjQ+P04wsmuCjt

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      0da5d92fecfd04b6a99d13215ff36bbf56386a18edad294e094df9d13f44dbec

    • Size

      40KB

    • MD5

      73be835092e39cf113ac1deff03e9170

    • SHA1

      d8815aa8cebdc9b092f42bd0be9dcacc29ebd079

    • SHA256

      0da5d92fecfd04b6a99d13215ff36bbf56386a18edad294e094df9d13f44dbec

    • SHA512

      9b00623626aac5e04b476d005e9b08a9911ed2944765dab8b63d62ce18461f910d8f3c5c48444302b1f3ab53efaab03be2449fe658629015783c513bed301ba8

    • SSDEEP

      768:8yxqjQl/EMQt4Oei7RwsHxyP7nbmzOQdJ/81DU:7xqjQ+P04wsmuCjt

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks