Overview

overview

10

Static

static

10

a6901d34c9...cd.exe

windows7-x64

10

a6901d34c9...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6901d34c93e5a29d47d764e238b82038c1964f9ced2e1d7798dee448c5524cd

  • Size

    2.4MB

  • Sample

    221126-dfcjdaga42

  • MD5

    16f752ca19d3c7a798b4093afed9df1a

  • SHA1

    381e68c9237ef768f7990b70e7f9bc89cb3e27d7

  • SHA256

    a6901d34c93e5a29d47d764e238b82038c1964f9ced2e1d7798dee448c5524cd

  • SHA512

    2483be1fd35413341fe9b497db6c47b0f9e34ab83b365bb1d755544c330e3457636c077c615cab1de56190efe323b2d911f6322250a8e1359c9fc6547e2bdbdf

  • SSDEEP

    24576:rBWN5DRRrglDngkFX2dKQ0ontRZSp8ebvYioiSeAZtlqZG+8nP+C+FiLlcsseJ+:rkQGKQ23QeS5brTnP+MN+

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      a6901d34c93e5a29d47d764e238b82038c1964f9ced2e1d7798dee448c5524cd

    • Size

      2.4MB

    • MD5

      16f752ca19d3c7a798b4093afed9df1a

    • SHA1

      381e68c9237ef768f7990b70e7f9bc89cb3e27d7

    • SHA256

      a6901d34c93e5a29d47d764e238b82038c1964f9ced2e1d7798dee448c5524cd

    • SHA512

      2483be1fd35413341fe9b497db6c47b0f9e34ab83b365bb1d755544c330e3457636c077c615cab1de56190efe323b2d911f6322250a8e1359c9fc6547e2bdbdf

    • SSDEEP

      24576:rBWN5DRRrglDngkFX2dKQ0ontRZSp8ebvYioiSeAZtlqZG+8nP+C+FiLlcsseJ+:rkQGKQ23QeS5brTnP+MN+

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks