neshta | baced5d242c5ae1fec24ebc6e031103a7ac61265aaa92ac5322ccdd7f0a3d706 | Triage

Submit
Reports

Overview

overview

Static

static

baced5d242...6N.exe

windows7-x64

baced5d242...6N.exe

windows10-2004-x64

Sharing

General

Target

baced5d242c5ae1fec24ebc6e031103a7ac61265aaa92ac5322ccdd7f0a3d706N
Size

238KB
Sample

241110-b41j1azkfp
MD5

413a66a5601989bc36e77a2f859e9580
SHA1

71ba22d73de5982997e205577adb66b5068d52be
SHA256

baced5d242c5ae1fec24ebc6e031103a7ac61265aaa92ac5322ccdd7f0a3d706
SHA512

08aa54ce01dad4c0d4c878a774cc454e3e126cc0729635eb761e0d4e6108953a799f9ff3a35359a38b1b8e14f022735d023064cf53e232989bebaff54a979e7a
SSDEEP

6144:YWjF/OeySe8AIqpoHbnDns1ND97deKzC/y:j3yV8hEoHbI3x/1

Score

10^/10

neshta discovery persistence spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

baced5d242c5ae1fec24ebc6e031103a7ac61265aaa92ac5322ccdd7f0a3d706N.exe

Resource

win7-20240903-en

neshta discovery persistence spyware

windows7-x64

6 signatures

120 seconds

Behavioral task

behavioral2

Sample

baced5d242c5ae1fec24ebc6e031103a7ac61265aaa92ac5322ccdd7f0a3d706N.exe

Resource

win10v2004-20241007-en

neshta discovery persistence spyware

windows10-2004-x64

5 signatures

120 seconds

Malware Config

Targets

- Target
  
  baced5d242c5ae1fec24ebc6e031103a7ac61265aaa92ac5322ccdd7f0a3d706N
- Size
  
  238KB
- MD5
  
  413a66a5601989bc36e77a2f859e9580
- SHA1
  
  71ba22d73de5982997e205577adb66b5068d52be
- SHA256
  
  baced5d242c5ae1fec24ebc6e031103a7ac61265aaa92ac5322ccdd7f0a3d706
- SHA512
  
  08aa54ce01dad4c0d4c878a774cc454e3e126cc0729635eb761e0d4e6108953a799f9ff3a35359a38b1b8e14f022735d023064cf53e232989bebaff54a979e7a
- SSDEEP
  
  6144:YWjF/OeySe8AIqpoHbnDns1ND97deKzC/y:j3yV8hEoHbI3x/1
Score

10^/10

neshta discovery persistence spyware
- Detect Neshta payload
- Neshta
  Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
  persistence spyware neshta
- Neshta family
  neshta
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

neshtadiscoverypersistencespyware

behavioral2

neshtadiscoverypersistencespyware

© 2018-2024

Terms | Privacy