Overview

overview

10

Static

static

10

65e0381e73...cN.exe

windows7-x64

10

65e0381e73...cN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65e0381e73c589975c312ee7e074be665bbc74889a312c3d836ef25fe9d2e22cN.exe

  • Size

    859KB

  • Sample

    241129-2bnb3stpem

  • MD5

    c21df562eb430947b2a0166c9afaad30

  • SHA1

    de729d5ead88d68746f5f4db13cc5b0ecf2a2c1a

  • SHA256

    65e0381e73c589975c312ee7e074be665bbc74889a312c3d836ef25fe9d2e22c

  • SHA512

    3bfc18ef92aafb3a71c810b8eea5f82b819e44cd03dafcdb33753280fec91a7111ef18c1e31639664c169401fad8d58847207a3142c44500a0dfadd6d9da0a5a

  • SSDEEP

    24576:1wLVlTB7kXa65mKwMxEheqt+0ODsGk6w0Q:uTuaAhwBhBtuDsGFwj

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      65e0381e73c589975c312ee7e074be665bbc74889a312c3d836ef25fe9d2e22cN.exe

    • Size

      859KB

    • MD5

      c21df562eb430947b2a0166c9afaad30

    • SHA1

      de729d5ead88d68746f5f4db13cc5b0ecf2a2c1a

    • SHA256

      65e0381e73c589975c312ee7e074be665bbc74889a312c3d836ef25fe9d2e22c

    • SHA512

      3bfc18ef92aafb3a71c810b8eea5f82b819e44cd03dafcdb33753280fec91a7111ef18c1e31639664c169401fad8d58847207a3142c44500a0dfadd6d9da0a5a

    • SSDEEP

      24576:1wLVlTB7kXa65mKwMxEheqt+0ODsGk6w0Q:uTuaAhwBhBtuDsGFwj

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks