Overview

overview

10

Static

static

10

61fe8cd525...dN.exe

windows7-x64

10

61fe8cd525...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61fe8cd5253a022bdd9fd75314c44e471dab0c491eba458543d883a9678f756dN.exe

  • Size

    144KB

  • Sample

    241125-cr4lkasraz

  • MD5

    46d150964fb96e6968e3cefb4e2eaa60

  • SHA1

    17605348bc801c9fac11a53ac46e8b9b4b166a32

  • SHA256

    61fe8cd5253a022bdd9fd75314c44e471dab0c491eba458543d883a9678f756d

  • SHA512

    c55165326844ec701750280fd440de51870a221e89ba4793ef8f819c38cabb2d9d57babebcb05951045f9126aa3e200eb9c2df79f05a05ab863890d3f1c26bef

  • SSDEEP

    3072:sr85CquaJG4vlP6k4qmKjfHYToQjSJ9sfQvTg:k9RaJFvlP1jgTWJ4QvTg

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      61fe8cd5253a022bdd9fd75314c44e471dab0c491eba458543d883a9678f756dN.exe

    • Size

      144KB

    • MD5

      46d150964fb96e6968e3cefb4e2eaa60

    • SHA1

      17605348bc801c9fac11a53ac46e8b9b4b166a32

    • SHA256

      61fe8cd5253a022bdd9fd75314c44e471dab0c491eba458543d883a9678f756d

    • SHA512

      c55165326844ec701750280fd440de51870a221e89ba4793ef8f819c38cabb2d9d57babebcb05951045f9126aa3e200eb9c2df79f05a05ab863890d3f1c26bef

    • SSDEEP

      3072:sr85CquaJG4vlP6k4qmKjfHYToQjSJ9sfQvTg:k9RaJFvlP1jgTWJ4QvTg

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks