Overview

overview

10

Static

static

10

8ea24ca2ec...b9.exe

windows7-x64

10

8ea24ca2ec...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ea24ca2ec90e06fdf2b66aa9f606fdd9a67bd9b4de7bea39245143c7250d0b9.exe

  • Size

    734KB

  • Sample

    241117-sz453axmfk

  • MD5

    d78daee7686bb44d387148410a47a099

  • SHA1

    9b1facd95252e58db8af0e75908fb2f1385a253e

  • SHA256

    8ea24ca2ec90e06fdf2b66aa9f606fdd9a67bd9b4de7bea39245143c7250d0b9

  • SHA512

    1877da9aad52d81d6d864e8687a1cf82180ca7f981e72a6d1c6d6f61b287317bb760fd1484d7a8434ccf79dd332be7bd4aadb63d82bd9143672c35b3333f7954

  • SSDEEP

    12288:reZdQONJoFUtZGdcxeJD/68z5N/tjcLwsE:qjQVFSG1JD68z5N/tj4w5

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      8ea24ca2ec90e06fdf2b66aa9f606fdd9a67bd9b4de7bea39245143c7250d0b9.exe

    • Size

      734KB

    • MD5

      d78daee7686bb44d387148410a47a099

    • SHA1

      9b1facd95252e58db8af0e75908fb2f1385a253e

    • SHA256

      8ea24ca2ec90e06fdf2b66aa9f606fdd9a67bd9b4de7bea39245143c7250d0b9

    • SHA512

      1877da9aad52d81d6d864e8687a1cf82180ca7f981e72a6d1c6d6f61b287317bb760fd1484d7a8434ccf79dd332be7bd4aadb63d82bd9143672c35b3333f7954

    • SSDEEP

      12288:reZdQONJoFUtZGdcxeJD/68z5N/tjcLwsE:qjQVFSG1JD68z5N/tj4w5

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks