Overview

overview

10

Static

static

10

OXI_Joiner.exe

windows7-x64

10

OXI_Joiner.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    OXI_Joiner.exe

  • Size

    664KB

  • Sample

    230508-rl43gaba54

  • MD5

    fdedf270247992ec6b17c119b5775329

  • SHA1

    7778f9dac30513a7521396ad43108ad98dfd9716

  • SHA256

    949894004a0d75ff5336829c5db76dac3fe13917f265e93b3fea57ea12d91cb8

  • SHA512

    a4a2b9a27a1d4457b5b2bccf27c02619a2ab031f16d9e72e9c7756ed6429604166dc0a626c7ffdb4ae89823787a0e941f57b23d94f941000edd0932bae35506f

  • SSDEEP

    12288:IdCXaLCUh6WMI/ILtj8mxMgF0fr0WTdfZ0CIFw8nSktQdWgv0tpVtR3lYgUYO:I4XeZjyCFTdfLG5nSkAWgcTVts9

Score
10/10
neshtapersistencespywarestealerupx

Malware Config

Targets

    • Target

      OXI_Joiner.exe

    • Size

      664KB

    • MD5

      fdedf270247992ec6b17c119b5775329

    • SHA1

      7778f9dac30513a7521396ad43108ad98dfd9716

    • SHA256

      949894004a0d75ff5336829c5db76dac3fe13917f265e93b3fea57ea12d91cb8

    • SHA512

      a4a2b9a27a1d4457b5b2bccf27c02619a2ab031f16d9e72e9c7756ed6429604166dc0a626c7ffdb4ae89823787a0e941f57b23d94f941000edd0932bae35506f

    • SSDEEP

      12288:IdCXaLCUh6WMI/ILtj8mxMgF0fr0WTdfZ0CIFw8nSktQdWgv0tpVtR3lYgUYO:I4XeZjyCFTdfLG5nSkAWgcTVts9

    Score
    10/10
    neshtapersistencespywarestealerupx

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks