Overview

overview

10

Static

static

10

cb6ab20d65...e5.exe

windows7-x64

10

cb6ab20d65...e5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb6ab20d6596c85d905b139bbc94437e43ffb50d7dea612f503582d1f691a4e5.exe

  • Size

    203KB

  • Sample

    241111-wt3a3awpaq

  • MD5

    94eebcb22465164151dee4f6784f81ab

  • SHA1

    507cc577bef6e54b46d18c451a7db28fc8156008

  • SHA256

    cb6ab20d6596c85d905b139bbc94437e43ffb50d7dea612f503582d1f691a4e5

  • SHA512

    4ac2833a9ee0d2b46439f1c9f603c95c5a43679e74a64f70fc71f1f20f755c829162140ac0cfd79a87bc8f7682e40167a45c683979bc3d67483a7d6a2692e0d4

  • SSDEEP

    3072:sr85Cw8RXwMsPaV1t+CNJNBwXXyZuVo9f9vZDe4L8R9b31ic2BXA:k9H1w5P21t+C7ZZFf9vZiJV31ic2Bw

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      cb6ab20d6596c85d905b139bbc94437e43ffb50d7dea612f503582d1f691a4e5.exe

    • Size

      203KB

    • MD5

      94eebcb22465164151dee4f6784f81ab

    • SHA1

      507cc577bef6e54b46d18c451a7db28fc8156008

    • SHA256

      cb6ab20d6596c85d905b139bbc94437e43ffb50d7dea612f503582d1f691a4e5

    • SHA512

      4ac2833a9ee0d2b46439f1c9f603c95c5a43679e74a64f70fc71f1f20f755c829162140ac0cfd79a87bc8f7682e40167a45c683979bc3d67483a7d6a2692e0d4

    • SSDEEP

      3072:sr85Cw8RXwMsPaV1t+CNJNBwXXyZuVo9f9vZDe4L8R9b31ic2BXA:k9H1w5P21t+C7ZZFf9vZiJV31ic2Bw

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks