Overview

overview

10

Static

static

10

9ef78ca8e1...eN.exe

windows7-x64

10

9ef78ca8e1...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ef78ca8e1be8c59bee39b84fd295acf03c9d7667e5419dc8777c5b4da0deeaeN.exe

  • Size

    892KB

  • Sample

    241125-fh2bmazkcs

  • MD5

    d5d30ec9bad8d9aa8eba0358880a6480

  • SHA1

    d343c880021583453ecfe088365fdf124c212ead

  • SHA256

    9ef78ca8e1be8c59bee39b84fd295acf03c9d7667e5419dc8777c5b4da0deeae

  • SHA512

    f233029b97b20de628e3326e9c29381a83fbb90794e501bf2b4f76747f95eaacceb85a1b7fad4a86da1b5740c0e59e675bf111625cf8be30c0cd2855b3e89d9f

  • SSDEEP

    24576:qOcKiCuljxYn1emmbyGK+y/Iq02knsgCMp:EljZbyGK+0tknsup

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      9ef78ca8e1be8c59bee39b84fd295acf03c9d7667e5419dc8777c5b4da0deeaeN.exe

    • Size

      892KB

    • MD5

      d5d30ec9bad8d9aa8eba0358880a6480

    • SHA1

      d343c880021583453ecfe088365fdf124c212ead

    • SHA256

      9ef78ca8e1be8c59bee39b84fd295acf03c9d7667e5419dc8777c5b4da0deeae

    • SHA512

      f233029b97b20de628e3326e9c29381a83fbb90794e501bf2b4f76747f95eaacceb85a1b7fad4a86da1b5740c0e59e675bf111625cf8be30c0cd2855b3e89d9f

    • SSDEEP

      24576:qOcKiCuljxYn1emmbyGK+y/Iq02knsgCMp:EljZbyGK+0tknsup

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks