Overview

overview

10

Static

static

10

21a464de69...6d.exe

windows7-x64

10

21a464de69...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21a464de693ab85c1e9e2c03bbb8f0c0f282c481809cdd9296598974c63dca6d.exe

  • Size

    1.2MB

  • Sample

    241119-gqtr7a1cma

  • MD5

    8e3bb8d18c482244c14a14661060997a

  • SHA1

    e78d4f35f8455a4763c7da186d109f52d4f2dd73

  • SHA256

    21a464de693ab85c1e9e2c03bbb8f0c0f282c481809cdd9296598974c63dca6d

  • SHA512

    16b3c8512bb1c5d8594fc943e0f0a638b701bcfec108669d53c1da3ebea7323fcbfe5bcf114b72bc0081cb2f8eec75e05858cb446db709f1d27ea3cee4dcdb1b

  • SSDEEP

    12288:Uck4myZEmuLDIYfab1HFmCYZ8t7p7WXha1Uy8N/nou:Uc3myp6DIYKFmCYYp7WXha1UyYnb

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      21a464de693ab85c1e9e2c03bbb8f0c0f282c481809cdd9296598974c63dca6d.exe

    • Size

      1.2MB

    • MD5

      8e3bb8d18c482244c14a14661060997a

    • SHA1

      e78d4f35f8455a4763c7da186d109f52d4f2dd73

    • SHA256

      21a464de693ab85c1e9e2c03bbb8f0c0f282c481809cdd9296598974c63dca6d

    • SHA512

      16b3c8512bb1c5d8594fc943e0f0a638b701bcfec108669d53c1da3ebea7323fcbfe5bcf114b72bc0081cb2f8eec75e05858cb446db709f1d27ea3cee4dcdb1b

    • SSDEEP

      12288:Uck4myZEmuLDIYfab1HFmCYZ8t7p7WXha1Uy8N/nou:Uc3myp6DIYKFmCYYp7WXha1UyYnb

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks