Overview

overview

10

Static

static

10

7686b70034...56.exe

windows7-x64

10

7686b70034...56.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7686b70034aaffb5edde2a88d4818ce61e148d5316ce29197203363be956a156

  • Size

    40KB

  • Sample

    221106-1h5dhacgb7

  • MD5

    0619c4dd7a4fb1e7720ca3410a5a8278

  • SHA1

    0eff3c3912ce752e7c2fdb0c276d020188f9f77e

  • SHA256

    7686b70034aaffb5edde2a88d4818ce61e148d5316ce29197203363be956a156

  • SHA512

    15accb47e1ee04e0e5f513068f86d4171bbd68308aef0ccf8986d6d3e844b6d87186e24d63051b88d24217c7499508cda0c66d59a2dd135434be8655d3b77488

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJAZF:JxqjQ+P04wsmJC

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      7686b70034aaffb5edde2a88d4818ce61e148d5316ce29197203363be956a156

    • Size

      40KB

    • MD5

      0619c4dd7a4fb1e7720ca3410a5a8278

    • SHA1

      0eff3c3912ce752e7c2fdb0c276d020188f9f77e

    • SHA256

      7686b70034aaffb5edde2a88d4818ce61e148d5316ce29197203363be956a156

    • SHA512

      15accb47e1ee04e0e5f513068f86d4171bbd68308aef0ccf8986d6d3e844b6d87186e24d63051b88d24217c7499508cda0c66d59a2dd135434be8655d3b77488

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJAZF:JxqjQ+P04wsmJC

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks