Overview

overview

10

Static

static

10

3ee32b96d6...ff.exe

windows7-x64

10

3ee32b96d6...ff.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ee32b96d6e95276ad9a5296a4ddf097a926e4b3604d73c387331b28ee7485ff

  • Size

    40KB

  • Sample

    221030-dd779sadbp

  • MD5

    a31c411ea5a1a837a57688770f90de10

  • SHA1

    93dc44ffaec4f6a898be557c156cf08fc74baea0

  • SHA256

    3ee32b96d6e95276ad9a5296a4ddf097a926e4b3604d73c387331b28ee7485ff

  • SHA512

    767ea7440155a430ba64b5a6257e621d6bbe2ffc3febcc83a4c93354c73e715a299d2de493ee81f1b8f14ede87e172d981db27b4820881776c7e630f92abce36

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJg8bSGX:JxqjQ+P04wsmJCWj

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      3ee32b96d6e95276ad9a5296a4ddf097a926e4b3604d73c387331b28ee7485ff

    • Size

      40KB

    • MD5

      a31c411ea5a1a837a57688770f90de10

    • SHA1

      93dc44ffaec4f6a898be557c156cf08fc74baea0

    • SHA256

      3ee32b96d6e95276ad9a5296a4ddf097a926e4b3604d73c387331b28ee7485ff

    • SHA512

      767ea7440155a430ba64b5a6257e621d6bbe2ffc3febcc83a4c93354c73e715a299d2de493ee81f1b8f14ede87e172d981db27b4820881776c7e630f92abce36

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJg8bSGX:JxqjQ+P04wsmJCWj

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks