Overview

overview

10

Static

static

10

21219915dd...aN.exe

windows7-x64

10

21219915dd...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21219915dd45a0b0b855b5f4f15cdfd530d20a15224b53ae259cf99579d3e5faN

  • Size

    202KB

  • Sample

    241012-wz59xayepj

  • MD5

    4fc9b1d7c698d3b015c5cd7ef676a560

  • SHA1

    2ae608775f5d4ec397bb789c30c45a2617fbff9f

  • SHA256

    21219915dd45a0b0b855b5f4f15cdfd530d20a15224b53ae259cf99579d3e5fa

  • SHA512

    331ca7e6a9fbbfce47a7a905a3d9948b590c226026188e039d1b179b25e20bfde79c11583c8f4ba6eb56a9538bfd42da058feb36d553c32b086d1223a6c88c1b

  • SSDEEP

    3072:sr85CeSVzPR/CQGr8KG+GuhoXB+POB8DApAmJ3pB8DApFEA:k9vRqQGfY8DgJ378DKH

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      21219915dd45a0b0b855b5f4f15cdfd530d20a15224b53ae259cf99579d3e5faN

    • Size

      202KB

    • MD5

      4fc9b1d7c698d3b015c5cd7ef676a560

    • SHA1

      2ae608775f5d4ec397bb789c30c45a2617fbff9f

    • SHA256

      21219915dd45a0b0b855b5f4f15cdfd530d20a15224b53ae259cf99579d3e5fa

    • SHA512

      331ca7e6a9fbbfce47a7a905a3d9948b590c226026188e039d1b179b25e20bfde79c11583c8f4ba6eb56a9538bfd42da058feb36d553c32b086d1223a6c88c1b

    • SSDEEP

      3072:sr85CeSVzPR/CQGr8KG+GuhoXB+POB8DApAmJ3pB8DApFEA:k9vRqQGfY8DgJ378DKH

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks