Overview

overview

10

Static

static

3

3ac7fc2bc5...1f.exe

windows7-x64

10

3ac7fc2bc5...1f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ac7fc2bc5f694f02cedd7fdaf0e620142be7e7156ddcbbd14b81f611800ee1f.exe

  • Size

    6.6MB

  • Sample

    241124-xdmfcatkcw

  • MD5

    dc07d2d6fb1b90498854539eb1ba99b5

  • SHA1

    b3510647916d1130a3a4d64b810ba158c7cb2a23

  • SHA256

    3ac7fc2bc5f694f02cedd7fdaf0e620142be7e7156ddcbbd14b81f611800ee1f

  • SHA512

    4bba011f1648ad629a4dba01a6beb5de9733a5c62ca46ed67c06a15708d19eff1bd954a06474ba0151ee122542dd75dbee5a7204d363661cb855581ed2968eb2

  • SSDEEP

    196608:LNcF81s0bNLHED947GgiD6vtjCf702bTBw:Lp1s0b5HED9OGgLf

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      3ac7fc2bc5f694f02cedd7fdaf0e620142be7e7156ddcbbd14b81f611800ee1f.exe

    • Size

      6.6MB

    • MD5

      dc07d2d6fb1b90498854539eb1ba99b5

    • SHA1

      b3510647916d1130a3a4d64b810ba158c7cb2a23

    • SHA256

      3ac7fc2bc5f694f02cedd7fdaf0e620142be7e7156ddcbbd14b81f611800ee1f

    • SHA512

      4bba011f1648ad629a4dba01a6beb5de9733a5c62ca46ed67c06a15708d19eff1bd954a06474ba0151ee122542dd75dbee5a7204d363661cb855581ed2968eb2

    • SSDEEP

      196608:LNcF81s0bNLHED947GgiD6vtjCf702bTBw:Lp1s0b5HED9OGgLf

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks