Overview

overview

10

Static

static

10

305e76ff96...4f.exe

windows7-x64

10

305e76ff96...4f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    305e76ff96ae2dff9d8aafcf0aaa5c4fabd653a872f17a80ce9a0ed32995b44f

  • Size

    4.2MB

  • Sample

    221127-t3699sca45

  • MD5

    7472aa8ada24db2f7b3aa935ada3dc6e

  • SHA1

    4b87411466b7a966590203f5a15c16ff28a00d4d

  • SHA256

    305e76ff96ae2dff9d8aafcf0aaa5c4fabd653a872f17a80ce9a0ed32995b44f

  • SHA512

    9a57cfcb384523126777c20f219676123c0551d04b2de7d2ab629e9a2961fb40bf343ab18741e700066e00e2a3b05eddb2552168a444e31bf62c882dcae466d6

  • SSDEEP

    49152:RLtNez2CtydkWv3VxW16H/2J7owXVcAjsoqrtJIZQyOn9B5d1nj3zEXq:RL5CtyFLH/2bVurtZsXq

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      305e76ff96ae2dff9d8aafcf0aaa5c4fabd653a872f17a80ce9a0ed32995b44f

    • Size

      4.2MB

    • MD5

      7472aa8ada24db2f7b3aa935ada3dc6e

    • SHA1

      4b87411466b7a966590203f5a15c16ff28a00d4d

    • SHA256

      305e76ff96ae2dff9d8aafcf0aaa5c4fabd653a872f17a80ce9a0ed32995b44f

    • SHA512

      9a57cfcb384523126777c20f219676123c0551d04b2de7d2ab629e9a2961fb40bf343ab18741e700066e00e2a3b05eddb2552168a444e31bf62c882dcae466d6

    • SSDEEP

      49152:RLtNez2CtydkWv3VxW16H/2J7owXVcAjsoqrtJIZQyOn9B5d1nj3zEXq:RL5CtyFLH/2bVurtZsXq

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks