Overview

overview

10

Static

static

10

f1aa8b589f...3a.exe

windows7-x64

10

f1aa8b589f...3a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1aa8b589f850f85285a9a94e4b5ed6c994efdf1ac3f1d57287eb1c08697133a

  • Size

    105KB

  • Sample

    240505-gkg67scb55

  • MD5

    e9d8a339275462d6ce4b09868dc76e42

  • SHA1

    bbfdc5fc592e237aa46b97294f1c07305c64cfa0

  • SHA256

    f1aa8b589f850f85285a9a94e4b5ed6c994efdf1ac3f1d57287eb1c08697133a

  • SHA512

    0e1d43ccfc94a94120acc0e794f25d3f4f3048564a6da439cba5787f529d68edbe37182b92306c3a3cf26502fac3d63889f98ee07558844f5ee7d88c6f55026d

  • SSDEEP

    1536:JxqjQ+P04wsmJCVYIOWSd+7/3n/qzZwsqOsKgKSk9nH9lEm8/tsMZKy4Qy5:sr85CjSoL/S1sxKSklHEbtsMZMx

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      f1aa8b589f850f85285a9a94e4b5ed6c994efdf1ac3f1d57287eb1c08697133a

    • Size

      105KB

    • MD5

      e9d8a339275462d6ce4b09868dc76e42

    • SHA1

      bbfdc5fc592e237aa46b97294f1c07305c64cfa0

    • SHA256

      f1aa8b589f850f85285a9a94e4b5ed6c994efdf1ac3f1d57287eb1c08697133a

    • SHA512

      0e1d43ccfc94a94120acc0e794f25d3f4f3048564a6da439cba5787f529d68edbe37182b92306c3a3cf26502fac3d63889f98ee07558844f5ee7d88c6f55026d

    • SSDEEP

      1536:JxqjQ+P04wsmJCVYIOWSd+7/3n/qzZwsqOsKgKSk9nH9lEm8/tsMZKy4Qy5:sr85CjSoL/S1sxKSklHEbtsMZMx

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks