Overview

overview

10

Static

static

3

补丁打包Srv.exe

windows7-x64

10

补丁打包Srv.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    补丁打包Srv.exe

  • Size

    95KB

  • Sample

    241119-jzd47sshmq

  • MD5

    91f8c5655e265566963c8110f8a9de7b

  • SHA1

    b96f17997e415aeb3cdf82a68927aeae232febac

  • SHA256

    cb9e615dcaf44187ad82f13ee4b711c38696c33e0fc25aa44309937bd571811f

  • SHA512

    7e9b9612e3b4868afb70c9dd6a94715fd0511043949a89cacead24e2369744525d0a411d92c6cc81f24f7e222e1be37a0ba790dcb9ed7e8ab289e0d4f504f7d1

  • SSDEEP

    1536:yxqjQ+P04wsZLnDrC5MXL5uXZnzEPf+hzRsibKplyXTq8OGRnsPFG+RODTbN:zr8WDrCawnYPmROzoTq0+RO7N

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      补丁打包Srv.exe

    • Size

      95KB

    • MD5

      91f8c5655e265566963c8110f8a9de7b

    • SHA1

      b96f17997e415aeb3cdf82a68927aeae232febac

    • SHA256

      cb9e615dcaf44187ad82f13ee4b711c38696c33e0fc25aa44309937bd571811f

    • SHA512

      7e9b9612e3b4868afb70c9dd6a94715fd0511043949a89cacead24e2369744525d0a411d92c6cc81f24f7e222e1be37a0ba790dcb9ed7e8ab289e0d4f504f7d1

    • SSDEEP

      1536:yxqjQ+P04wsZLnDrC5MXL5uXZnzEPf+hzRsibKplyXTq8OGRnsPFG+RODTbN:zr8WDrCawnYPmROzoTq0+RO7N

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks