Overview

overview

10

Static

static

10

caf802e251...1N.exe

windows7-x64

10

caf802e251...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    caf802e251fef0e10be1839d32c271be2abf687cdccfa1842baae6c1d51a6af1N.exe

  • Size

    365KB

  • Sample

    241130-jvw48aypav

  • MD5

    28336bd7b647d1ab5915ed0da4fd9c90

  • SHA1

    508e3c7f53d7f32dbad9e29b16ad91289164f190

  • SHA256

    caf802e251fef0e10be1839d32c271be2abf687cdccfa1842baae6c1d51a6af1

  • SHA512

    e2753338f61e34a981807b02e436b91b7df7decad2e898f006ab6f82389b76c6fc96cd9e8643e96cf4f646d40209c1e13ff00bb5b03a0a80445ff5e26e237611

  • SSDEEP

    6144:k9niwHv5AjJLo2I3p9ojRxAOZSu7dBEJTl1YMsJTl1YM19:y9HujJLYp9Y2OdBo7y7

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      caf802e251fef0e10be1839d32c271be2abf687cdccfa1842baae6c1d51a6af1N.exe

    • Size

      365KB

    • MD5

      28336bd7b647d1ab5915ed0da4fd9c90

    • SHA1

      508e3c7f53d7f32dbad9e29b16ad91289164f190

    • SHA256

      caf802e251fef0e10be1839d32c271be2abf687cdccfa1842baae6c1d51a6af1

    • SHA512

      e2753338f61e34a981807b02e436b91b7df7decad2e898f006ab6f82389b76c6fc96cd9e8643e96cf4f646d40209c1e13ff00bb5b03a0a80445ff5e26e237611

    • SSDEEP

      6144:k9niwHv5AjJLo2I3p9ojRxAOZSu7dBEJTl1YMsJTl1YM19:y9HujJLYp9Y2OdBo7y7

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks