Overview

overview

10

Static

static

245f0936c1...c5.exe

windows7-x64

10

245f0936c1...c5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    245f0936c1c58768d75d8642d377c950b4991dad945867fedfafc2b98ff9aac5

  • Size

    40KB

  • Sample

    221127-yedehahc7v

  • MD5

    45ef8a2e2bd11c611117d099cfff8dd8

  • SHA1

    5baebdde29db2d4d69b46e705a337b4013db866c

  • SHA256

    245f0936c1c58768d75d8642d377c950b4991dad945867fedfafc2b98ff9aac5

  • SHA512

    c62d021108c489e52db6b30f7077058d0e4feeffb56d5e1da790997a458b4fcc44ffec059c1795c9bbf8ce001e6d9480298f92f391ef8bd8023eff2f65ffe128

  • SSDEEP

    768:FyxqjQl/EMQt4Oei7RwsHxKANM0nDhlzOQdJwmWjdV:kxqjQ+P04wsZLnDrCvjdV

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      245f0936c1c58768d75d8642d377c950b4991dad945867fedfafc2b98ff9aac5

    • Size

      40KB

    • MD5

      45ef8a2e2bd11c611117d099cfff8dd8

    • SHA1

      5baebdde29db2d4d69b46e705a337b4013db866c

    • SHA256

      245f0936c1c58768d75d8642d377c950b4991dad945867fedfafc2b98ff9aac5

    • SHA512

      c62d021108c489e52db6b30f7077058d0e4feeffb56d5e1da790997a458b4fcc44ffec059c1795c9bbf8ce001e6d9480298f92f391ef8bd8023eff2f65ffe128

    • SSDEEP

      768:FyxqjQl/EMQt4Oei7RwsHxKANM0nDhlzOQdJwmWjdV:kxqjQ+P04wsZLnDrCvjdV

    Score
    10/10
    neshtapersistencespywarestealer

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Change Default File Association

1
T1042

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks