Overview

overview

10

Static

static

10

0fb68d14f5...aN.exe

windows7-x64

10

0fb68d14f5...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fb68d14f5df72f3beef9deb488debf2292e31cf7bada4bf1f0b98d0be64f82aN.exe

  • Size

    2.2MB

  • Sample

    241201-1wslvsyndr

  • MD5

    9ce3e3d5729677adde8e02ea16abfe00

  • SHA1

    87bf4d2308efdceade2186bc5b19ddc226373663

  • SHA256

    0fb68d14f5df72f3beef9deb488debf2292e31cf7bada4bf1f0b98d0be64f82a

  • SHA512

    898fbe58a61ee19de3cf7873ecdf175ba928fc4c0c90136335c1d00f14b9c477f91c3e40a2ecf77fde5f013b5fcbb25e89255b02cfdb22d854671c782b8947f1

  • SSDEEP

    49152:MQ9Gk4MfjNPvvD6S4RGuxYc9i24+6Vn5hPGwpE3C:MQcRMfISi+oid/VLPGwpE3C

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      0fb68d14f5df72f3beef9deb488debf2292e31cf7bada4bf1f0b98d0be64f82aN.exe

    • Size

      2.2MB

    • MD5

      9ce3e3d5729677adde8e02ea16abfe00

    • SHA1

      87bf4d2308efdceade2186bc5b19ddc226373663

    • SHA256

      0fb68d14f5df72f3beef9deb488debf2292e31cf7bada4bf1f0b98d0be64f82a

    • SHA512

      898fbe58a61ee19de3cf7873ecdf175ba928fc4c0c90136335c1d00f14b9c477f91c3e40a2ecf77fde5f013b5fcbb25e89255b02cfdb22d854671c782b8947f1

    • SSDEEP

      49152:MQ9Gk4MfjNPvvD6S4RGuxYc9i24+6Vn5hPGwpE3C:MQcRMfISi+oid/VLPGwpE3C

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks