Overview

overview

10

Static

static

10

8e41c08421...aN.exe

windows7-x64

10

8e41c08421...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e41c084210dac0abbe99a3e2e5aabfd71b6d4a9c0668a7157951a0007d4806aN.exe

  • Size

    317KB

  • Sample

    241111-rgl14azhmd

  • MD5

    b46c00378a2e405fa31c008204fca1b1

  • SHA1

    9187144ebbc7489b596318145398bd837bee2569

  • SHA256

    dc3f29419dc8b48dbbde234cab5922895db391463b740ea5e84be085a10a9d4e

  • SHA512

    b6e7ea24c7a4854b2434964fbcf717c50a9add00df07f68ef2639520ace1f6351098f0287ba7bf2124a47f3e503fe5127a425781eb0124a139eaff32bcabcb66

  • SSDEEP

    6144:k9dJQdmPAWRyPtYtu0w7ETB1YOvXA/B0olANroV:cQknRyVYtW7ETTtvXeOolANO

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      8e41c084210dac0abbe99a3e2e5aabfd71b6d4a9c0668a7157951a0007d4806aN.exe

    • Size

      317KB

    • MD5

      b46c00378a2e405fa31c008204fca1b1

    • SHA1

      9187144ebbc7489b596318145398bd837bee2569

    • SHA256

      dc3f29419dc8b48dbbde234cab5922895db391463b740ea5e84be085a10a9d4e

    • SHA512

      b6e7ea24c7a4854b2434964fbcf717c50a9add00df07f68ef2639520ace1f6351098f0287ba7bf2124a47f3e503fe5127a425781eb0124a139eaff32bcabcb66

    • SSDEEP

      6144:k9dJQdmPAWRyPtYtu0w7ETB1YOvXA/B0olANroV:cQknRyVYtW7ETTtvXeOolANO

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks