Overview

overview

10

Static

static

10

497c720f4d...2b.exe

windows7-x64

10

497c720f4d...2b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    497c720f4d8ef8bba043f887ed024e124cc76700c717862ee5b2224f31ad782b

  • Size

    259KB

  • Sample

    221125-ws75xshb41

  • MD5

    06035be4f17bdbd0c8243c5b3dd42366

  • SHA1

    7b73f5612c1b122fdccec5e4c95f8f6320767b9c

  • SHA256

    497c720f4d8ef8bba043f887ed024e124cc76700c717862ee5b2224f31ad782b

  • SHA512

    d745240051a063ebf0420f8b7dc22af879efb4298b4f0379da822fac0208e188095075290a01e166da12b8bb98ed72c237d13d3fe86e0ffba68c6a7fe75f9ff1

  • SSDEEP

    3072:sr85CtGbGTeJQAGRtXZ0UMzg4qyr4MXhVumXmN4vcZ9TPiMIK9QKHOj5MFjEucpt:k9tEGTeOXDpsgvGyS/Dk9OPZ3NxB

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      497c720f4d8ef8bba043f887ed024e124cc76700c717862ee5b2224f31ad782b

    • Size

      259KB

    • MD5

      06035be4f17bdbd0c8243c5b3dd42366

    • SHA1

      7b73f5612c1b122fdccec5e4c95f8f6320767b9c

    • SHA256

      497c720f4d8ef8bba043f887ed024e124cc76700c717862ee5b2224f31ad782b

    • SHA512

      d745240051a063ebf0420f8b7dc22af879efb4298b4f0379da822fac0208e188095075290a01e166da12b8bb98ed72c237d13d3fe86e0ffba68c6a7fe75f9ff1

    • SSDEEP

      3072:sr85CtGbGTeJQAGRtXZ0UMzg4qyr4MXhVumXmN4vcZ9TPiMIK9QKHOj5MFjEucpt:k9tEGTeOXDpsgvGyS/Dk9OPZ3NxB

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks