Overview

overview

10

Static

static

10

41ae23595d...1f.exe

windows7-x64

10

41ae23595d...1f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    41ae23595d66cc3b587ce1b696e7252bd7b68034452237567c19465eeecd0a1f

  • Size

    2.5MB

  • Sample

    240615-zmzhdaxflq

  • MD5

    690ddd392e73000de2f1524ef21b377b

  • SHA1

    a28425a36562a41b727440746b3a9f02e64ec517

  • SHA256

    41ae23595d66cc3b587ce1b696e7252bd7b68034452237567c19465eeecd0a1f

  • SHA512

    19ed296326b2db53badfd1885040f67fdf3074d7876b660cb9547bd83c597b12da9153c6e62f249ecd5b54ffcbfb633f27e40989546357021229f5c05bf27dff

  • SSDEEP

    49152:JHyjtk2MYC5GDVHyjtk2MYC5GDNHyjtk2MYC5GDBnanhn9:Jmtk2acmtk2aEmtk2aCnanhn9

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      41ae23595d66cc3b587ce1b696e7252bd7b68034452237567c19465eeecd0a1f

    • Size

      2.5MB

    • MD5

      690ddd392e73000de2f1524ef21b377b

    • SHA1

      a28425a36562a41b727440746b3a9f02e64ec517

    • SHA256

      41ae23595d66cc3b587ce1b696e7252bd7b68034452237567c19465eeecd0a1f

    • SHA512

      19ed296326b2db53badfd1885040f67fdf3074d7876b660cb9547bd83c597b12da9153c6e62f249ecd5b54ffcbfb633f27e40989546357021229f5c05bf27dff

    • SSDEEP

      49152:JHyjtk2MYC5GDVHyjtk2MYC5GDNHyjtk2MYC5GDBnanhn9:Jmtk2acmtk2aEmtk2aCnanhn9

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks