Overview

overview

10

Static

static

10

a02857c9e3...2N.exe

windows7-x64

10

a02857c9e3...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a02857c9e35f9e22c687999c820398c12fbff61dbfc0a60061b31f9453743112N.exe

  • Size

    356KB

  • Sample

    241206-29sz8ayrbl

  • MD5

    5cd3caf696a3dbe90c77067537f37380

  • SHA1

    51ee9003fa2f40ba67df5bcd49805578d487456a

  • SHA256

    a02857c9e35f9e22c687999c820398c12fbff61dbfc0a60061b31f9453743112

  • SHA512

    8dd455b64548ff541a70c6b11767de254336d8f0552547e2af296006d536df41dc1d4fba40b864a8f0d786c2594c64c5c8d61643140fa13e964dc791294b08d2

  • SSDEEP

    6144:k9NPDAWKklwXx39oBLohizkvxhlDqJd+9:SsWPlwX2Lov5Hq

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      a02857c9e35f9e22c687999c820398c12fbff61dbfc0a60061b31f9453743112N.exe

    • Size

      356KB

    • MD5

      5cd3caf696a3dbe90c77067537f37380

    • SHA1

      51ee9003fa2f40ba67df5bcd49805578d487456a

    • SHA256

      a02857c9e35f9e22c687999c820398c12fbff61dbfc0a60061b31f9453743112

    • SHA512

      8dd455b64548ff541a70c6b11767de254336d8f0552547e2af296006d536df41dc1d4fba40b864a8f0d786c2594c64c5c8d61643140fa13e964dc791294b08d2

    • SSDEEP

      6144:k9NPDAWKklwXx39oBLohizkvxhlDqJd+9:SsWPlwX2Lov5Hq

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks