Overview

overview

10

Static

static

3

565037eadf...b0.exe

windows7-x64

10

565037eadf...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    565037eadf02ff72e5267ee3c6d6dab604558d5d738a4730bf47dfd475c9c1b0.exe

  • Size

    824KB

  • Sample

    241205-mbxs7awlcm

  • MD5

    793edee0572b0addbb8ed6f75fb1c54a

  • SHA1

    d0ad4cb1a47bd1a6351c57f3be6935105058c262

  • SHA256

    565037eadf02ff72e5267ee3c6d6dab604558d5d738a4730bf47dfd475c9c1b0

  • SHA512

    274b8d4dd8bafc1510058cbe176c6570b56ee268e1630a2f1a9b8754855f6711952b7101e6e3fa77e19e7f300cc46694d010eec2723f11c520e9463f5ef71088

  • SSDEEP

    6144:m9VG8/pelvlWH++XBHSrNvLW1K3vLW1Ku:c6lvlW1yrNjImjIR

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      565037eadf02ff72e5267ee3c6d6dab604558d5d738a4730bf47dfd475c9c1b0.exe

    • Size

      824KB

    • MD5

      793edee0572b0addbb8ed6f75fb1c54a

    • SHA1

      d0ad4cb1a47bd1a6351c57f3be6935105058c262

    • SHA256

      565037eadf02ff72e5267ee3c6d6dab604558d5d738a4730bf47dfd475c9c1b0

    • SHA512

      274b8d4dd8bafc1510058cbe176c6570b56ee268e1630a2f1a9b8754855f6711952b7101e6e3fa77e19e7f300cc46694d010eec2723f11c520e9463f5ef71088

    • SSDEEP

      6144:m9VG8/pelvlWH++XBHSrNvLW1K3vLW1Ku:c6lvlW1yrNjImjIR

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks