Overview

overview

10

Static

static

10

Ocean-fX8Z9F6N8.exe

windows7-x64

10

Ocean-fX8Z9F6N8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ocean-fX8Z9F6N8.exe

  • Size

    2.4MB

  • Sample

    241012-wtnsnstfkf

  • MD5

    cf01fd4322bcfd83364fffd15ef29a75

  • SHA1

    b1445db2e6545de3f94aa1f914a6697a0e027579

  • SHA256

    8ad433b21b524ef400200f478cf1f280a77d810ed7d51c47422f3d7c33eaf3cb

  • SHA512

    9cf8cba5f2f29745ab115c9f7ebb23c04686c5dff284e4f6762dc7a79a50c3a3340fb94496865213141e6c59c354134503f65f5eff263a9ad651eaa42277a28e

  • SSDEEP

    24576:dLphtLzNPZlVOEvD9SYtSBzh0DkkaE64RyKMZyCV1E5/VGJnFLOrt1:BtL99OEUtWDkG6MptMnct1

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      Ocean-fX8Z9F6N8.exe

    • Size

      2.4MB

    • MD5

      cf01fd4322bcfd83364fffd15ef29a75

    • SHA1

      b1445db2e6545de3f94aa1f914a6697a0e027579

    • SHA256

      8ad433b21b524ef400200f478cf1f280a77d810ed7d51c47422f3d7c33eaf3cb

    • SHA512

      9cf8cba5f2f29745ab115c9f7ebb23c04686c5dff284e4f6762dc7a79a50c3a3340fb94496865213141e6c59c354134503f65f5eff263a9ad651eaa42277a28e

    • SSDEEP

      24576:dLphtLzNPZlVOEvD9SYtSBzh0DkkaE64RyKMZyCV1E5/VGJnFLOrt1:BtL99OEUtWDkG6MptMnct1

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks