Overview

overview

10

Static

static

10

104808bf12...c7.exe

windows7-x64

10

104808bf12...c7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7

  • Size

    979KB

  • Sample

    221118-2dj3faba64

  • MD5

    1665331c7e89616087c22eeab7d80ca2

  • SHA1

    aecc7aab08d57dda967e652a8fba0aac401236f3

  • SHA256

    104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7

  • SHA512

    533461858d7f4e903dee37c6916c20b83218fab4d115a7da78c47123c0b6780b8f3b6fb7fef795eebd8f5ace92e9c0de9ae24c9ad593c3aaf9ff75ed2258fffe

  • SSDEEP

    24576:RduFt5EbKq2+xXcW5V6Ao5k0+9KAM5zHgc58RNgeHo:RMwJxXcW5s3knKAMD5eXo

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7

    • Size

      979KB

    • MD5

      1665331c7e89616087c22eeab7d80ca2

    • SHA1

      aecc7aab08d57dda967e652a8fba0aac401236f3

    • SHA256

      104808bf12de8ff6b8f3887cbde6a57afc9e9739e8d97670ff9f8d862344e5c7

    • SHA512

      533461858d7f4e903dee37c6916c20b83218fab4d115a7da78c47123c0b6780b8f3b6fb7fef795eebd8f5ace92e9c0de9ae24c9ad593c3aaf9ff75ed2258fffe

    • SSDEEP

      24576:RduFt5EbKq2+xXcW5V6Ao5k0+9KAM5zHgc58RNgeHo:RMwJxXcW5s3knKAMD5eXo

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks