Overview

overview

10

Static

static

10

d8d9864d5e...aN.exe

windows7-x64

10

d8d9864d5e...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8d9864d5efe42a106a2001485f78b0b0379945f3472ff4bf992e41a8e99ab7aN

  • Size

    988KB

  • Sample

    241019-z1rdxs1dpq

  • MD5

    54d768cf98ebbbb57753ba3ab2d572c0

  • SHA1

    44215b46b505fa59057f0f7705b05648b2024fdc

  • SHA256

    d8d9864d5efe42a106a2001485f78b0b0379945f3472ff4bf992e41a8e99ab7a

  • SHA512

    8bda46e89399c7fd13226e081e820b27cc484a0d6966e400e7854845cd29e4fd90d45cfb92af7c7be9f5187916b94e45e66abbec4ceb72a29a17fa1b7f071c0c

  • SSDEEP

    24576:Jt6tP2jLB0EGb7PmcQYZs7zvtGuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuIuuuG:QPjlyQZUUuuuuuuuuuuuuuuuuuuuuuup

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      d8d9864d5efe42a106a2001485f78b0b0379945f3472ff4bf992e41a8e99ab7aN

    • Size

      988KB

    • MD5

      54d768cf98ebbbb57753ba3ab2d572c0

    • SHA1

      44215b46b505fa59057f0f7705b05648b2024fdc

    • SHA256

      d8d9864d5efe42a106a2001485f78b0b0379945f3472ff4bf992e41a8e99ab7a

    • SHA512

      8bda46e89399c7fd13226e081e820b27cc484a0d6966e400e7854845cd29e4fd90d45cfb92af7c7be9f5187916b94e45e66abbec4ceb72a29a17fa1b7f071c0c

    • SSDEEP

      24576:Jt6tP2jLB0EGb7PmcQYZs7zvtGuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuIuuuG:QPjlyQZUUuuuuuuuuuuuuuuuuuuuuuup

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks