Overview

overview

10

Static

static

10

c1fb4f39ca...11.exe

windows7-x64

10

c1fb4f39ca...11.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c1fb4f39cad4e30ca9783445d2bf3cf771b13b1362bf2615c350f6f0af9e3411

  • Size

    328KB

  • Sample

    221020-d3t2yaceaj

  • MD5

    465ea3abe03bc22064b6c03eb0ed3736

  • SHA1

    c405f211bd1049fa0519543cc33f9cc12657a622

  • SHA256

    c1fb4f39cad4e30ca9783445d2bf3cf771b13b1362bf2615c350f6f0af9e3411

  • SHA512

    92d3b32b6f8e3a58c13034e0367b438bf2fa58e6218f8c9378c2545c7a844dc81274d8f11b619012e4ab5cf2ff8910ef5422be9c033948548092a3b6bff9e8b1

  • SSDEEP

    3072:sr85Czq5ksIHWtC/9Jhuyx9Y2CLNJ2K2vL9k0JhtRJQEhNzrYqBlt8cgyfgxGRiS:k9/AtSPz+2ChJ2K2pVRJQEhycg

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      c1fb4f39cad4e30ca9783445d2bf3cf771b13b1362bf2615c350f6f0af9e3411

    • Size

      328KB

    • MD5

      465ea3abe03bc22064b6c03eb0ed3736

    • SHA1

      c405f211bd1049fa0519543cc33f9cc12657a622

    • SHA256

      c1fb4f39cad4e30ca9783445d2bf3cf771b13b1362bf2615c350f6f0af9e3411

    • SHA512

      92d3b32b6f8e3a58c13034e0367b438bf2fa58e6218f8c9378c2545c7a844dc81274d8f11b619012e4ab5cf2ff8910ef5422be9c033948548092a3b6bff9e8b1

    • SSDEEP

      3072:sr85Czq5ksIHWtC/9Jhuyx9Y2CLNJ2K2vL9k0JhtRJQEhNzrYqBlt8cgyfgxGRiS:k9/AtSPz+2ChJ2K2pVRJQEhycg

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks