Overview

overview

10

Static

static

1

acc827567b...2f.exe

windows7-x64

10

acc827567b...2f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    acc827567b5e974088be039feb4801ff56df0bf793a854b4c7a11bf986cfe32f

  • Size

    94KB

  • Sample

    221106-1g342sehcn

  • MD5

    0ce9df9d7f8ed9c75f60ac12f1d5aca0

  • SHA1

    62d7825ebeb0a5f577039f33134d8e3c5900ce32

  • SHA256

    acc827567b5e974088be039feb4801ff56df0bf793a854b4c7a11bf986cfe32f

  • SHA512

    ca946aae4a7a103188e767872dc0b68519c98983c6969dc54a2261d6dcf5efb335acf6fba74dcd885935c1f1167266a87a2cc6d27d21fde0a8294dc3ea32b9df

  • SSDEEP

    1536:yxqjQ+P04wsZLnDrCrtpfFikejuLXB65939tY6HBg4sXJxLReeL:zr8WDrCrtpdikeSLk395hYXJxteeL

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      acc827567b5e974088be039feb4801ff56df0bf793a854b4c7a11bf986cfe32f

    • Size

      94KB

    • MD5

      0ce9df9d7f8ed9c75f60ac12f1d5aca0

    • SHA1

      62d7825ebeb0a5f577039f33134d8e3c5900ce32

    • SHA256

      acc827567b5e974088be039feb4801ff56df0bf793a854b4c7a11bf986cfe32f

    • SHA512

      ca946aae4a7a103188e767872dc0b68519c98983c6969dc54a2261d6dcf5efb335acf6fba74dcd885935c1f1167266a87a2cc6d27d21fde0a8294dc3ea32b9df

    • SSDEEP

      1536:yxqjQ+P04wsZLnDrCrtpfFikejuLXB65939tY6HBg4sXJxLReeL:zr8WDrCrtpdikeSLk395hYXJxteeL

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks