Overview

overview

10

Static

static

10

3c1860e214...dN.exe

windows7-x64

10

3c1860e214...dN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c1860e214061f5d64a2cf0f7df64cef664cda3616fccc0c4003e7f0630fe96dN.exe

  • Size

    40KB

  • Sample

    241130-wt6ngsvlem

  • MD5

    94f3e5a100ad7cafd49079e044e41330

  • SHA1

    de77c452961be4dfa58e14188334b0f84603f3b6

  • SHA256

    3c1860e214061f5d64a2cf0f7df64cef664cda3616fccc0c4003e7f0630fe96d

  • SHA512

    720ae83126a33dd64ca363a6b02913c25b342c65a3814c04d3df5ab4aa86ce5ddde7f6f54e9c80955c8948cb7d6fffaf4bbbb1d8b546ad8e3157d570b431f69f

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJXDA:JxqjQ+P04wsmJCi

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      3c1860e214061f5d64a2cf0f7df64cef664cda3616fccc0c4003e7f0630fe96dN.exe

    • Size

      40KB

    • MD5

      94f3e5a100ad7cafd49079e044e41330

    • SHA1

      de77c452961be4dfa58e14188334b0f84603f3b6

    • SHA256

      3c1860e214061f5d64a2cf0f7df64cef664cda3616fccc0c4003e7f0630fe96d

    • SHA512

      720ae83126a33dd64ca363a6b02913c25b342c65a3814c04d3df5ab4aa86ce5ddde7f6f54e9c80955c8948cb7d6fffaf4bbbb1d8b546ad8e3157d570b431f69f

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJXDA:JxqjQ+P04wsmJCi

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks