Overview

overview

10

Static

static

10

00aa5b6c23...13.exe

windows7-x64

10

00aa5b6c23...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00aa5b6c2303f19784e87895192c895dfb96d68bad30181dc842ada2a9cb9713

  • Size

    2.1MB

  • Sample

    240829-wqxamswdjm

  • MD5

    6d965885950b37bb341ad70dac1b6e0f

  • SHA1

    15fc7b94a453c53cbe11047b84186eaafbf7d022

  • SHA256

    00aa5b6c2303f19784e87895192c895dfb96d68bad30181dc842ada2a9cb9713

  • SHA512

    7771a598202679fdf049fe8274bfcf67b9d81bbd3f2fe952c862885c91f0d4e263fb7c73c80348e5b5b328c23409e10d822a55a9ccea4a8f92a9a94cff387436

  • SSDEEP

    24576:QA1UV5tbTtyEL95eICQ9n/S6mNIv291H2sFBRSeST8vYYG/mGv0MqwoWt8QN8QW:4V5hF5d63HXFLSeST8vymGxoWt8QdW

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      00aa5b6c2303f19784e87895192c895dfb96d68bad30181dc842ada2a9cb9713

    • Size

      2.1MB

    • MD5

      6d965885950b37bb341ad70dac1b6e0f

    • SHA1

      15fc7b94a453c53cbe11047b84186eaafbf7d022

    • SHA256

      00aa5b6c2303f19784e87895192c895dfb96d68bad30181dc842ada2a9cb9713

    • SHA512

      7771a598202679fdf049fe8274bfcf67b9d81bbd3f2fe952c862885c91f0d4e263fb7c73c80348e5b5b328c23409e10d822a55a9ccea4a8f92a9a94cff387436

    • SSDEEP

      24576:QA1UV5tbTtyEL95eICQ9n/S6mNIv291H2sFBRSeST8vYYG/mGv0MqwoWt8QN8QW:4V5hF5d63HXFLSeST8vymGxoWt8QdW

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks