Overview

overview

10

Static

static

10

52f7c001a8...cN.exe

windows7-x64

10

52f7c001a8...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    52f7c001a8fed7f8d9800bc72bdb04a49db9ab437668fdfe3d4cb728f66b7b7cN

  • Size

    40KB

  • Sample

    241020-y9p2saycnd

  • MD5

    5f3bb106099b258b90d699782db34c90

  • SHA1

    f40eded5550368d218c508a4cbaf909d5e9fdfee

  • SHA256

    52f7c001a8fed7f8d9800bc72bdb04a49db9ab437668fdfe3d4cb728f66b7b7c

  • SHA512

    cf32577913b930fedb1e66ccdffd9adfc7019fb54ad145d0d375ed0feed19a4e9150568f771d5fe7ac0264aa3b6b6f3613adddb1bdfbb86ee53be3fec104105a

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      52f7c001a8fed7f8d9800bc72bdb04a49db9ab437668fdfe3d4cb728f66b7b7cN

    • Size

      40KB

    • MD5

      5f3bb106099b258b90d699782db34c90

    • SHA1

      f40eded5550368d218c508a4cbaf909d5e9fdfee

    • SHA256

      52f7c001a8fed7f8d9800bc72bdb04a49db9ab437668fdfe3d4cb728f66b7b7c

    • SHA512

      cf32577913b930fedb1e66ccdffd9adfc7019fb54ad145d0d375ed0feed19a4e9150568f771d5fe7ac0264aa3b6b6f3613adddb1bdfbb86ee53be3fec104105a

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks