Overview

overview

10

Static

static

10

9d064348dd...0N.exe

windows7-x64

10

9d064348dd...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d064348dd748803df89cce6fb1083d0N.exe

  • Size

    146KB

  • Sample

    240902-qbr5gs1gpf

  • MD5

    9d064348dd748803df89cce6fb1083d0

  • SHA1

    50972a3cde5dc7b38a7060e6a444c69fe9709505

  • SHA256

    7e3ab144b3fa84f78cdf511bf2d10eabc172a27e3da14ea13f938830afacb93f

  • SHA512

    acd45832aa4a06bfeb476dac7a9d2f56d653237ab26565dfd3a970dd9f0de84ad5e286b651dcdf8d29d40f1c79435315861be73672c212d65288497cb983104b

  • SSDEEP

    3072:sr85CkkbAYn2GgYlBYN2fHYTo+mbt8wDSRUTT:k9xbAMpgY3gTS8DRUTT

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      9d064348dd748803df89cce6fb1083d0N.exe

    • Size

      146KB

    • MD5

      9d064348dd748803df89cce6fb1083d0

    • SHA1

      50972a3cde5dc7b38a7060e6a444c69fe9709505

    • SHA256

      7e3ab144b3fa84f78cdf511bf2d10eabc172a27e3da14ea13f938830afacb93f

    • SHA512

      acd45832aa4a06bfeb476dac7a9d2f56d653237ab26565dfd3a970dd9f0de84ad5e286b651dcdf8d29d40f1c79435315861be73672c212d65288497cb983104b

    • SSDEEP

      3072:sr85CkkbAYn2GgYlBYN2fHYTo+mbt8wDSRUTT:k9xbAMpgY3gTS8DRUTT

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks