Overview

overview

10

Static

static

10

NEAS.266f8...60.exe

windows7-x64

10

NEAS.266f8...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.266f8e0623283fb6efb882131a2b2660.exe

  • Size

    40KB

  • Sample

    231102-t69jsshg63

  • MD5

    266f8e0623283fb6efb882131a2b2660

  • SHA1

    ecbd784805402976e25f11f111f878b2fc45d183

  • SHA256

    6148a78ddc95740fe6c52af7ff53056fb5a9e5715c15393a32dbc61d679deb99

  • SHA512

    d2363e576c1e8e86b00cb753c5dc8325f8a52fc75d8ef98e6a6141ea20a24b0269fad0fab88cbaad9e8194b7453e36272a8227b49cb37531721032068dce4ad9

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ3ij2dVe8JKA:JxqjQ+P04wsmJC8i6dVe7

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      NEAS.266f8e0623283fb6efb882131a2b2660.exe

    • Size

      40KB

    • MD5

      266f8e0623283fb6efb882131a2b2660

    • SHA1

      ecbd784805402976e25f11f111f878b2fc45d183

    • SHA256

      6148a78ddc95740fe6c52af7ff53056fb5a9e5715c15393a32dbc61d679deb99

    • SHA512

      d2363e576c1e8e86b00cb753c5dc8325f8a52fc75d8ef98e6a6141ea20a24b0269fad0fab88cbaad9e8194b7453e36272a8227b49cb37531721032068dce4ad9

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ3ij2dVe8JKA:JxqjQ+P04wsmJC8i6dVe7

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks