Overview

overview

10

Static

static

10

a04e4f8ae8...8N.exe

windows7-x64

10

a04e4f8ae8...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a04e4f8ae82d3eb96f80609fbc8c39abb369662d55d9de1b0136ac84420b4478N.exe

  • Size

    690KB

  • Sample

    241207-1566lsskaq

  • MD5

    3d872168b893d37c180a68acfabaad80

  • SHA1

    1fbb3603a183fe74f7be28e32a40b9a8e33a04bc

  • SHA256

    a04e4f8ae82d3eb96f80609fbc8c39abb369662d55d9de1b0136ac84420b4478

  • SHA512

    bd09b153f243edabbb67b0f83cc67b3d2f520d26abbf22dff45648d0459f940cecb3e466e7bb0b157d717bd9c305496bb4ddba823f7d468f4bbe14a8266a554b

  • SSDEEP

    6144:k9raNZphkNF94GbhkNF94GEelGtD0j4Agj1Rv18i8WTm2vrgyU9N9:nHphkL/bhkL/vGtD9jHvqqU

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      a04e4f8ae82d3eb96f80609fbc8c39abb369662d55d9de1b0136ac84420b4478N.exe

    • Size

      690KB

    • MD5

      3d872168b893d37c180a68acfabaad80

    • SHA1

      1fbb3603a183fe74f7be28e32a40b9a8e33a04bc

    • SHA256

      a04e4f8ae82d3eb96f80609fbc8c39abb369662d55d9de1b0136ac84420b4478

    • SHA512

      bd09b153f243edabbb67b0f83cc67b3d2f520d26abbf22dff45648d0459f940cecb3e466e7bb0b157d717bd9c305496bb4ddba823f7d468f4bbe14a8266a554b

    • SSDEEP

      6144:k9raNZphkNF94GbhkNF94GEelGtD0j4Agj1Rv18i8WTm2vrgyU9N9:nHphkL/bhkL/vGtD9jHvqqU

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks