Overview

overview

10

Static

static

10

c0192aa6fd...0N.exe

windows7-x64

10

c0192aa6fd...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0192aa6fdb0cf8ae978cec6ed8eba949ff267b388a8871c12c4f96cfa05c850N

  • Size

    1.1MB

  • Sample

    241109-re5enawckl

  • MD5

    8bee8618b89616f8b5c01620c72959c0

  • SHA1

    d12318f1b32947779fbaaba8f5dbaf12525a5f62

  • SHA256

    c0192aa6fdb0cf8ae978cec6ed8eba949ff267b388a8871c12c4f96cfa05c850

  • SHA512

    a75a819a5562bd0c16feae841bd47e98d2aacdcc48d699a027b5038256791982b13fb34a1a456769128271793830d49aff4754e30acf09340370d13df19f6c57

  • SSDEEP

    24576:+Wrdcw2OBzr/a6ysF3THgCx81odgfJ3j0:+Wrmw9zrC6DhTh81oOJT0

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      c0192aa6fdb0cf8ae978cec6ed8eba949ff267b388a8871c12c4f96cfa05c850N

    • Size

      1.1MB

    • MD5

      8bee8618b89616f8b5c01620c72959c0

    • SHA1

      d12318f1b32947779fbaaba8f5dbaf12525a5f62

    • SHA256

      c0192aa6fdb0cf8ae978cec6ed8eba949ff267b388a8871c12c4f96cfa05c850

    • SHA512

      a75a819a5562bd0c16feae841bd47e98d2aacdcc48d699a027b5038256791982b13fb34a1a456769128271793830d49aff4754e30acf09340370d13df19f6c57

    • SSDEEP

      24576:+Wrdcw2OBzr/a6ysF3THgCx81odgfJ3j0:+Wrmw9zrC6DhTh81oOJT0

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks