Overview

overview

10

Static

static

10

3fe2ee204d...29.exe

windows7-x64

10

3fe2ee204d...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fe2ee204d99e7fd4bbb87a9b761296a455e0386db135ad8a19525466a341529.exe

  • Size

    7.0MB

  • Sample

    241126-he3fmayrgt

  • MD5

    682ac008b9465a17a56abbb08d08b3b2

  • SHA1

    8a5bc62be20e78a5a9b190b025891ce6fbdccdb4

  • SHA256

    3fe2ee204d99e7fd4bbb87a9b761296a455e0386db135ad8a19525466a341529

  • SHA512

    591665f54f311f620de297bf67f7c1f31b707fed93ae0bf9a5c3e459179b2d69048efaf352694819aa31429f97db13188ed083baef6fcb3c1db06bf2b25c981b

  • SSDEEP

    196608:VaDvLHyZENKZbC+O05l8i+DHRDigS+HFU:E+oKI+dlgDjS+Hy

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      3fe2ee204d99e7fd4bbb87a9b761296a455e0386db135ad8a19525466a341529.exe

    • Size

      7.0MB

    • MD5

      682ac008b9465a17a56abbb08d08b3b2

    • SHA1

      8a5bc62be20e78a5a9b190b025891ce6fbdccdb4

    • SHA256

      3fe2ee204d99e7fd4bbb87a9b761296a455e0386db135ad8a19525466a341529

    • SHA512

      591665f54f311f620de297bf67f7c1f31b707fed93ae0bf9a5c3e459179b2d69048efaf352694819aa31429f97db13188ed083baef6fcb3c1db06bf2b25c981b

    • SSDEEP

      196608:VaDvLHyZENKZbC+O05l8i+DHRDigS+HFU:E+oKI+dlgDjS+Hy

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks