Overview

overview

10

Static

static

10

dd652506cb...8N.exe

windows7-x64

10

dd652506cb...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dd652506cbf7a9874fc32ea221e1382f7f8f01b797b4ec5471dabb5d7bdc08b8N.exe

  • Size

    1.3MB

  • Sample

    241201-nadjlazmcy

  • MD5

    1b07fdc6ba892a3eafebf758414dfaa0

  • SHA1

    9a1bd816b559cff1b81e2c30e0418533c6e6a8d7

  • SHA256

    dd652506cbf7a9874fc32ea221e1382f7f8f01b797b4ec5471dabb5d7bdc08b8

  • SHA512

    7d6bd06c6278c9485a4cb5e45f1e42f449bc25b1ab313790c5ff7b732cbe7a4b8496de43071581f3324ca4662a152340428cf3af8686967f702f38f8047d06fe

  • SSDEEP

    24576:fT29Y8Hasfku/oUbWJE/+595N/D3ET7YN2W2sN4:fWLNoguz59j/D3ZjN4

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      dd652506cbf7a9874fc32ea221e1382f7f8f01b797b4ec5471dabb5d7bdc08b8N.exe

    • Size

      1.3MB

    • MD5

      1b07fdc6ba892a3eafebf758414dfaa0

    • SHA1

      9a1bd816b559cff1b81e2c30e0418533c6e6a8d7

    • SHA256

      dd652506cbf7a9874fc32ea221e1382f7f8f01b797b4ec5471dabb5d7bdc08b8

    • SHA512

      7d6bd06c6278c9485a4cb5e45f1e42f449bc25b1ab313790c5ff7b732cbe7a4b8496de43071581f3324ca4662a152340428cf3af8686967f702f38f8047d06fe

    • SSDEEP

      24576:fT29Y8Hasfku/oUbWJE/+595N/D3ET7YN2W2sN4:fWLNoguz59j/D3ZjN4

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks