Overview

overview

10

Static

static

10

5f10826072...22.exe

windows7-x64

10

5f10826072...22.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f108260722c430df720e657b96cd0a09170f3d2925f0bad90428f21ed4d2222

  • Size

    40KB

  • Sample

    221029-v7n5xshbbn

  • MD5

    8436070d547d2091ebd7c229799c8550

  • SHA1

    524772b7a2d7b3abb539400fcbee33379ce0050c

  • SHA256

    5f108260722c430df720e657b96cd0a09170f3d2925f0bad90428f21ed4d2222

  • SHA512

    c51458fe0c27326c182af0688dabcc1615bca9ac82f74e295917a8d06082db0d329dad795841a18cf164f60ffe475a4628638a5194e8918d75ed659ed72141b2

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ/73hjn:JxqjQ+P04wsmJCgdj

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      5f108260722c430df720e657b96cd0a09170f3d2925f0bad90428f21ed4d2222

    • Size

      40KB

    • MD5

      8436070d547d2091ebd7c229799c8550

    • SHA1

      524772b7a2d7b3abb539400fcbee33379ce0050c

    • SHA256

      5f108260722c430df720e657b96cd0a09170f3d2925f0bad90428f21ed4d2222

    • SHA512

      c51458fe0c27326c182af0688dabcc1615bca9ac82f74e295917a8d06082db0d329dad795841a18cf164f60ffe475a4628638a5194e8918d75ed659ed72141b2

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ/73hjn:JxqjQ+P04wsmJCgdj

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks