Overview

overview

10

Static

static

10

6445eff790...88.exe

windows7-x64

10

6445eff790...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6445eff7900b1e036334162cf027b0e8e9c06e69cbd914d7bcddbf2094c10188

  • Size

    196KB

  • Sample

    221126-dfjmpaga52

  • MD5

    cb081dd3495d1dc3fbdbe23d0b9ce457

  • SHA1

    eab376077eac115f1c31c5c5c8cc31f66b1bbed6

  • SHA256

    6445eff7900b1e036334162cf027b0e8e9c06e69cbd914d7bcddbf2094c10188

  • SHA512

    8c590c2ba25150f4f057d62b33ba55bad98a71fb41e7270494f4b419839e4a7ca65314248ef649f83296d134d0c879d4fa8410dc9b86c22e009bc2477fed4dbe

  • SSDEEP

    6144:k9PgMU2x3OgTZu79vSdEVNm48uu8673prh/SAA6:qZhudSdEVNm48uu8673prh/S76

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      6445eff7900b1e036334162cf027b0e8e9c06e69cbd914d7bcddbf2094c10188

    • Size

      196KB

    • MD5

      cb081dd3495d1dc3fbdbe23d0b9ce457

    • SHA1

      eab376077eac115f1c31c5c5c8cc31f66b1bbed6

    • SHA256

      6445eff7900b1e036334162cf027b0e8e9c06e69cbd914d7bcddbf2094c10188

    • SHA512

      8c590c2ba25150f4f057d62b33ba55bad98a71fb41e7270494f4b419839e4a7ca65314248ef649f83296d134d0c879d4fa8410dc9b86c22e009bc2477fed4dbe

    • SSDEEP

      6144:k9PgMU2x3OgTZu79vSdEVNm48uu8673prh/SAA6:qZhudSdEVNm48uu8673prh/S76

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks