Overview

overview

10

Static

static

10

8b8a6e87a8...32.exe

windows7-x64

10

8b8a6e87a8...32.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b8a6e87a8043d8c2aeda68673d750c0_exe32.exe

  • Size

    991KB

  • Sample

    231015-ydzlcach6x

  • MD5

    8b8a6e87a8043d8c2aeda68673d750c0

  • SHA1

    2000f12d41fa846a0b0a515bd0c055673cfaf012

  • SHA256

    03a3e5008edcc3c84f49b524f83e919b75224115bd6a4b5314d908527034a33d

  • SHA512

    39d01fd01b8105ab304ade5279d7a621ac23dddb0df101a65afe7102c783a1c4af9464743f62786c29a6f0397cd354cfa4994f566793b576d7ed1fa51719c62e

  • SSDEEP

    12288:z8ry763nxQ+dlzjsgl5Kg1R9wPm6iz6cuse0CSz4uuOBM66zXkx:4rxQ+d1ggl5Kg1R9wPm6Bcle0c7Xkx

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      8b8a6e87a8043d8c2aeda68673d750c0_exe32.exe

    • Size

      991KB

    • MD5

      8b8a6e87a8043d8c2aeda68673d750c0

    • SHA1

      2000f12d41fa846a0b0a515bd0c055673cfaf012

    • SHA256

      03a3e5008edcc3c84f49b524f83e919b75224115bd6a4b5314d908527034a33d

    • SHA512

      39d01fd01b8105ab304ade5279d7a621ac23dddb0df101a65afe7102c783a1c4af9464743f62786c29a6f0397cd354cfa4994f566793b576d7ed1fa51719c62e

    • SSDEEP

      12288:z8ry763nxQ+dlzjsgl5Kg1R9wPm6iz6cuse0CSz4uuOBM66zXkx:4rxQ+d1ggl5Kg1R9wPm6Bcle0c7Xkx

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks