Analysis
- max time kernel
0s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
07/01/2024, 19:34
General
- Target a904074909010cf6dfc214697e6a3c1a.exe
- Size 1.7MB
- Sample240107-yae3jadeg3
- SHA256 35a88493460a356438d1232431aba9b9074b55a52356786b2682a972d7971064
Score
10/10
Malware Config
Signatures
- Detect Neshta payload 3 IoCs
- Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\a904074909010cf6dfc214697e6a3c1a.exe"C:\Users\Admin\AppData\Local\Temp\a904074909010cf6dfc214697e6a3c1a.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\3582-490\a904074909010cf6dfc214697e6a3c1a.exe"C:\Users\Admin\AppData\Local\Temp\3582-490\a904074909010cf6dfc214697e6a3c1a.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3108-98-0x0000000000400000-0x000000000041B000-memory.dmp
memory/3108-99-0x0000000000400000-0x000000000041B000-memory.dmp
memory/3108-101-0x0000000000400000-0x000000000041B000-memory.dmp