Overview

overview

10

Static

static

3

d60208f389...8e.exe

windows7-x64

10

d60208f389...8e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e
  • Size 21KB
  • Sample240715-npsbasvajn
  • SHA256 114efcdd88ff496008184061a54fbb2e05d44a5fe496748530017ff38492f16e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target
      d60208f3894f4556caae5ed2297c0ef1593a4a66f5af8f3f2e44a8f2896bbf8e.exe
    • Size 40KB
    • SHA256 d60208f3894f4556caae5ed2297c0ef1593a4a66f5af8f3f2e44a8f2896bbf8e
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    neshtapersistencespywarestealer

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks