Overview

overview

10

Static

static

10

0d8791f76a...b9.exe

windows7-x64

10

0d8791f76a...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d8791f76aecdf6faaf93de35876f1bb8d92b1c120cca115878cd409fef460b9

  • Size

    255KB

  • Sample

    241119-x8cvdszrhx

  • MD5

    a2ad29c2a94664f7317563a3c3cc32db

  • SHA1

    1562764d3cc170f23de0139e73a211aff0d86a95

  • SHA256

    0d8791f76aecdf6faaf93de35876f1bb8d92b1c120cca115878cd409fef460b9

  • SHA512

    782ad42ab7d1965c370fe44a0fef802d08ad7661a4a1594e45172a9f3e1d08d5407c57f94f8e47c8bf3e67073ef63e5208610bc69efe69114bced13d76810f25

  • SSDEEP

    6144:k9SoYJVOTBCFyn/7IwBYZiC70GVHeZeYvPm:RoQOTMFyn/7IwOYve

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      0d8791f76aecdf6faaf93de35876f1bb8d92b1c120cca115878cd409fef460b9

    • Size

      255KB

    • MD5

      a2ad29c2a94664f7317563a3c3cc32db

    • SHA1

      1562764d3cc170f23de0139e73a211aff0d86a95

    • SHA256

      0d8791f76aecdf6faaf93de35876f1bb8d92b1c120cca115878cd409fef460b9

    • SHA512

      782ad42ab7d1965c370fe44a0fef802d08ad7661a4a1594e45172a9f3e1d08d5407c57f94f8e47c8bf3e67073ef63e5208610bc69efe69114bced13d76810f25

    • SSDEEP

      6144:k9SoYJVOTBCFyn/7IwBYZiC70GVHeZeYvPm:RoQOTMFyn/7IwOYve

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks