Overview

overview

10

Static

static

8ccf7001fa...a0.exe

windows7-x64

10

8ccf7001fa...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ccf7001fa8cd8c8da764ec5d9e745cf00f4139db1d848d1095833eabf8140a0

  • Size

    703KB

  • Sample

    221119-3byngsfb84

  • MD5

    18a72e36587739b2773db54bc0fde370

  • SHA1

    46f8ec093984b39a5089e5a54759671d8cbbf286

  • SHA256

    8ccf7001fa8cd8c8da764ec5d9e745cf00f4139db1d848d1095833eabf8140a0

  • SHA512

    b6684b04b610612e60eaec756c3c0dec2735e020111ed56099e382123c4e7040e84725bfe7a7101c7b631dbc1dd54e0beb2819494b8629f44e34e8bbaf4d7bae

  • SSDEEP

    12288:RgSYSf07+9PulOhTwqU7EOBIz3xt7KjKTDLn/eYUfaztJkr7iMSKCMg9BVh:oqwq+Ei4DuobjkqMZCZnX

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      8ccf7001fa8cd8c8da764ec5d9e745cf00f4139db1d848d1095833eabf8140a0

    • Size

      703KB

    • MD5

      18a72e36587739b2773db54bc0fde370

    • SHA1

      46f8ec093984b39a5089e5a54759671d8cbbf286

    • SHA256

      8ccf7001fa8cd8c8da764ec5d9e745cf00f4139db1d848d1095833eabf8140a0

    • SHA512

      b6684b04b610612e60eaec756c3c0dec2735e020111ed56099e382123c4e7040e84725bfe7a7101c7b631dbc1dd54e0beb2819494b8629f44e34e8bbaf4d7bae

    • SSDEEP

      12288:RgSYSf07+9PulOhTwqU7EOBIz3xt7KjKTDLn/eYUfaztJkr7iMSKCMg9BVh:oqwq+Ei4DuobjkqMZCZnX

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks