Overview

overview

10

Static

static

10

d414ec7fb1...1N.exe

windows7-x64

10

d414ec7fb1...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d414ec7fb136677a5c66939a5b1c1a9c41241e923fbd15318af30b6a7015b5b1N.exe

  • Size

    144KB

  • Sample

    241124-whhsaa1pav

  • MD5

    677986498894d2df51cdada9dc412300

  • SHA1

    de32e6f52353810ff99caea2b091d5c991e90f2c

  • SHA256

    d414ec7fb136677a5c66939a5b1c1a9c41241e923fbd15318af30b6a7015b5b1

  • SHA512

    936aaa450733e36dfefc862c92f4cbeb59e4ce6cafc80e45a234deccf19cf88355fa7104352412f99fa5a3dc28c2ae976e8c7b6cd4152f4895e00fcf9d3ed66f

  • SSDEEP

    3072:sr85CquaJG4vlP6k4qmKjfHYToCrSJ9sfQvTg:k9RaJFvlP1jgTkJ4QvTg

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      d414ec7fb136677a5c66939a5b1c1a9c41241e923fbd15318af30b6a7015b5b1N.exe

    • Size

      144KB

    • MD5

      677986498894d2df51cdada9dc412300

    • SHA1

      de32e6f52353810ff99caea2b091d5c991e90f2c

    • SHA256

      d414ec7fb136677a5c66939a5b1c1a9c41241e923fbd15318af30b6a7015b5b1

    • SHA512

      936aaa450733e36dfefc862c92f4cbeb59e4ce6cafc80e45a234deccf19cf88355fa7104352412f99fa5a3dc28c2ae976e8c7b6cd4152f4895e00fcf9d3ed66f

    • SSDEEP

      3072:sr85CquaJG4vlP6k4qmKjfHYToCrSJ9sfQvTg:k9RaJFvlP1jgTkJ4QvTg

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks