Overview

overview

10

Static

static

10

7bce800612...15.exe

windows7-x64

10

7bce800612...15.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bce800612fa6ef53884ca094ed043f088af46b7fb12ad333512e932f99f3515

  • Size

    1.3MB

  • Sample

    241112-aa77baypax

  • MD5

    d0522fa173a05e5fdb9bc8a019037728

  • SHA1

    05d1edd593f31f36dd4bfe426a5a6a7550614dc1

  • SHA256

    7bce800612fa6ef53884ca094ed043f088af46b7fb12ad333512e932f99f3515

  • SHA512

    00dceb8ac5444e77671e1e0f4b89a1219ee057c143212629ea6240b1d3c1afc8414831ab99be60fc65fb105bbf7fdbe6105fa72a0596505e9d60de88a48838c2

  • SSDEEP

    24576:AnTgED/SrD3jfdV2I+8tir9MeqdOrgDHey:CT/D/SrTxV+1ZMJD+y

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      7bce800612fa6ef53884ca094ed043f088af46b7fb12ad333512e932f99f3515

    • Size

      1.3MB

    • MD5

      d0522fa173a05e5fdb9bc8a019037728

    • SHA1

      05d1edd593f31f36dd4bfe426a5a6a7550614dc1

    • SHA256

      7bce800612fa6ef53884ca094ed043f088af46b7fb12ad333512e932f99f3515

    • SHA512

      00dceb8ac5444e77671e1e0f4b89a1219ee057c143212629ea6240b1d3c1afc8414831ab99be60fc65fb105bbf7fdbe6105fa72a0596505e9d60de88a48838c2

    • SSDEEP

      24576:AnTgED/SrD3jfdV2I+8tir9MeqdOrgDHey:CT/D/SrTxV+1ZMJD+y

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks