Overview

overview

10

Static

static

10

cc356545c3...ca.exe

windows7-x64

10

cc356545c3...ca.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc356545c3804c811c007ed5235d2aca.bin

  • Size

    139KB

  • Sample

    240107-dezbradafk

  • MD5

    cc356545c3804c811c007ed5235d2aca

  • SHA1

    68239396dd04d70324e34709725a7fc8cf3af42b

  • SHA256

    05e3af4fd7d70b843680c4b5b6fe251407a84b0dbea17ec04834f77cdd6dd241

  • SHA512

    3829e0e218b75e5fbabc5bd30fdc7fcdc36bd534379963be0fd68e00a5cb311679b0967c788a08594ba004325d71afc5f12af4320c8cf1276cd68dc1f1e85d50

  • SSDEEP

    1536:9xqjQ+P04wsmJCamVpgM+Wf3VkPVfT48Jnit4dXJlViN1U3/edr7QvQt3WpOck/t:wr85CaRMJ/cPiq5bVin8/edz+92mhTY

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      cc356545c3804c811c007ed5235d2aca.bin

    • Size

      139KB

    • MD5

      cc356545c3804c811c007ed5235d2aca

    • SHA1

      68239396dd04d70324e34709725a7fc8cf3af42b

    • SHA256

      05e3af4fd7d70b843680c4b5b6fe251407a84b0dbea17ec04834f77cdd6dd241

    • SHA512

      3829e0e218b75e5fbabc5bd30fdc7fcdc36bd534379963be0fd68e00a5cb311679b0967c788a08594ba004325d71afc5f12af4320c8cf1276cd68dc1f1e85d50

    • SSDEEP

      1536:9xqjQ+P04wsmJCamVpgM+Wf3VkPVfT48Jnit4dXJlViN1U3/edr7QvQt3WpOck/t:wr85CaRMJ/cPiq5bVin8/edz+92mhTY

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks