Overview

overview

10

Static

static

10

2024-10-21...ta.exe

windows7-x64

7

2024-10-21...ta.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-10-2024 10:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-10-21_afd9e3fb138eecec611d42f073bc44bc_mafia_neshta.exe

  • Size

    579KB

  • MD5

    afd9e3fb138eecec611d42f073bc44bc

  • SHA1

    877523b64626ebd8fa50b3eb0214314f63d41649

  • SHA256

    e53a4aaad552ff79195737b6efe54cc1b6fc81945c023bee4a51e53e67c34550

  • SHA512

    92844bb5432d9f329f2104dafa67e8e31d8be8fb436df1a7aedd5d52d6335a6edccc7de6de1670a723b06bda687fd7f9d425be05bf4d70286b0deaa9e4bb90fc

  • SSDEEP

    12288:G7v7ICAUWM5W8MzRzF7v7K7v7u7v7u7v7w:GD7IC/Wn8UlFD7KD7uD7uD7w

Score
7/10
discoverypersistencespywarestealer

Malware Config

Signatures

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-10-21_afd9e3fb138eecec611d42f073bc44bc_mafia_neshta.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-10-21_afd9e3fb138eecec611d42f073bc44bc_mafia_neshta.exe"
    1⤵
    • Adds Run key to start application
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:4328

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
    Filesize

    9KB

    MD5

    7fc6f882637522b92c78381c4a704bbf

    SHA1

    9fc446e7851fca643d03c98abe8457d955d19efa

    SHA256

    b10e21aaaa8c2b113119e306765830d1f965fac337f9edb72bd9c195b4aed5a1

    SHA512

    0bf3e6c846e0d2f8cafbc35167b06359689583ee355535ad0cddffd58b54ae2ab916ad63f4de348dee968c65d16705c1f14956dc948c7603f9c02488a22e2885

    Download Submit