Overview

overview

10

Static

static

10

8f52dfde61...1f.exe

windows7-x64

10

8f52dfde61...1f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f52dfde61a71cdc4877aaf2d58498a71be73ce5ba305f73a5bc60d4142b771f

  • Size

    321KB

  • Sample

    221030-ddw51aheh2

  • MD5

    a31caa74ac37dac781ae6a9a202ea7f9

  • SHA1

    1356f6f8996a4642dbe87ad0951ba7fefcf6bb77

  • SHA256

    8f52dfde61a71cdc4877aaf2d58498a71be73ce5ba305f73a5bc60d4142b771f

  • SHA512

    dfe8732070ad1fc08ae316dbba432c9ea53244de6bade1cbbc94206b3d59e1dd2f7024d490982ed3ec8705ea86f0de81c7eb967813983b7349e72c8956df9a8b

  • SSDEEP

    1536:JxqjQ+P04wsmJCO1qat3JUT+uQwweJto1qaJhIy/XWaWeQOkWT3JUT+uQwweJtoO:sr85COeKmToWy/XxWeQlrKmTo35ugpLu

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      8f52dfde61a71cdc4877aaf2d58498a71be73ce5ba305f73a5bc60d4142b771f

    • Size

      321KB

    • MD5

      a31caa74ac37dac781ae6a9a202ea7f9

    • SHA1

      1356f6f8996a4642dbe87ad0951ba7fefcf6bb77

    • SHA256

      8f52dfde61a71cdc4877aaf2d58498a71be73ce5ba305f73a5bc60d4142b771f

    • SHA512

      dfe8732070ad1fc08ae316dbba432c9ea53244de6bade1cbbc94206b3d59e1dd2f7024d490982ed3ec8705ea86f0de81c7eb967813983b7349e72c8956df9a8b

    • SSDEEP

      1536:JxqjQ+P04wsmJCO1qat3JUT+uQwweJto1qaJhIy/XWaWeQOkWT3JUT+uQwweJtoO:sr85COeKmToWy/XxWeQlrKmTo35ugpLu

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks