Overview

overview

10

Static

static

10

NEAS.58af4...f0.exe

windows7-x64

10

NEAS.58af4...f0.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.58af4a16fbfd48ed1123994405a4f7f0.exe

  • Size

    126KB

  • Sample

    231021-z62f3sfb29

  • MD5

    58af4a16fbfd48ed1123994405a4f7f0

  • SHA1

    1a27913253db93dc2d49c45337df0ec4f517ad4a

  • SHA256

    1bec6c396cd9900ad5ee555a8b5c11c4c48c027315eb2c9bc6483b76b4e97233

  • SHA512

    1f03deb50608bd08d897cbae52c5f6fe617bdd81e1695e5e925ec2293ae74ea3c8e9ffbe91ad2afe05a663a3c389882659c58bbd75d9eeabb4f81d8417a7fa0e

  • SSDEEP

    3072:sr85CEj9WOxhapLVKoq1RvAIPgP2YKDRoHbw+AQ0Rw8Id:k9ERKVM3gP2VMaBg

Score
10/10
neshtapersistencespyware

Malware Config

Targets

    • Target

      NEAS.58af4a16fbfd48ed1123994405a4f7f0.exe

    • Size

      126KB

    • MD5

      58af4a16fbfd48ed1123994405a4f7f0

    • SHA1

      1a27913253db93dc2d49c45337df0ec4f517ad4a

    • SHA256

      1bec6c396cd9900ad5ee555a8b5c11c4c48c027315eb2c9bc6483b76b4e97233

    • SHA512

      1f03deb50608bd08d897cbae52c5f6fe617bdd81e1695e5e925ec2293ae74ea3c8e9ffbe91ad2afe05a663a3c389882659c58bbd75d9eeabb4f81d8417a7fa0e

    • SSDEEP

      3072:sr85CEj9WOxhapLVKoq1RvAIPgP2YKDRoHbw+AQ0Rw8Id:k9ERKVM3gP2VMaBg

    Score
    10/10
    neshtapersistencespyware

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks