Overview

overview

10

Static

static

10

da41c29674...7e.exe

windows7-x64

10

da41c29674...7e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da41c29674fe8cc170a0fe4c859da9f14fa79d33422d6660c2f016da83c8597e

  • Size

    568KB

  • Sample

    221123-v9pjgabd39

  • MD5

    03c55c7badacb2964bc98d00b75a140f

  • SHA1

    03139096dfdb7693ab7a86beb02fae9e66640452

  • SHA256

    da41c29674fe8cc170a0fe4c859da9f14fa79d33422d6660c2f016da83c8597e

  • SHA512

    2a1a8f3f217cbd1fcc47dc777fc20e1780c34d6d8784cb25f53320e95a9b60b83bed51c7382e5d817262b477d6bf882228765af37e394fa781e7d0d23f6ae25a

  • SSDEEP

    6144:k9fz6EJ3Lj1/AkBPI/cmEYv1Zpr8QplBY8Kh5Wr6oa+dH7DCBA3hzhx6UDbUpLpE:+z6CJ/jSTYlzMDCix9x6UDbo0RPjdsS

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      da41c29674fe8cc170a0fe4c859da9f14fa79d33422d6660c2f016da83c8597e

    • Size

      568KB

    • MD5

      03c55c7badacb2964bc98d00b75a140f

    • SHA1

      03139096dfdb7693ab7a86beb02fae9e66640452

    • SHA256

      da41c29674fe8cc170a0fe4c859da9f14fa79d33422d6660c2f016da83c8597e

    • SHA512

      2a1a8f3f217cbd1fcc47dc777fc20e1780c34d6d8784cb25f53320e95a9b60b83bed51c7382e5d817262b477d6bf882228765af37e394fa781e7d0d23f6ae25a

    • SSDEEP

      6144:k9fz6EJ3Lj1/AkBPI/cmEYv1Zpr8QplBY8Kh5Wr6oa+dH7DCBA3hzhx6UDbUpLpE:+z6CJ/jSTYlzMDCix9x6UDbo0RPjdsS

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks