Overview

overview

10

Static

static

10

9cf6354caf...fN.exe

windows7-x64

10

9cf6354caf...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9cf6354caf3d1d8e819743b6c6a9769861f083f01dfa36bd88b175395f5c2edfN.exe

  • Size

    219KB

  • Sample

    241207-egy97svmaz

  • MD5

    c32404882bf22d793acd7f9596c7be80

  • SHA1

    bea147e215f67276a1ea5ca1c5806d0639a590e9

  • SHA256

    9cf6354caf3d1d8e819743b6c6a9769861f083f01dfa36bd88b175395f5c2edf

  • SHA512

    c6e82baa0cb5bf114b510d8ec6ecd8edc5150535189a43016350635a4ef3e91fe66b939604ce5f02796706879b690b2904c21e80e395ff6ad42ecde6c1ba028b

  • SSDEEP

    3072:sr85CDicYPym++7obFQ/eWV7XmY2BN+v6zAmzG7Ur85C:k9GAm++05QxV7XI+vM67M9

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      9cf6354caf3d1d8e819743b6c6a9769861f083f01dfa36bd88b175395f5c2edfN.exe

    • Size

      219KB

    • MD5

      c32404882bf22d793acd7f9596c7be80

    • SHA1

      bea147e215f67276a1ea5ca1c5806d0639a590e9

    • SHA256

      9cf6354caf3d1d8e819743b6c6a9769861f083f01dfa36bd88b175395f5c2edf

    • SHA512

      c6e82baa0cb5bf114b510d8ec6ecd8edc5150535189a43016350635a4ef3e91fe66b939604ce5f02796706879b690b2904c21e80e395ff6ad42ecde6c1ba028b

    • SSDEEP

      3072:sr85CDicYPym++7obFQ/eWV7XmY2BN+v6zAmzG7Ur85C:k9GAm++05QxV7XI+vM67M9

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks