Overview

overview

10

Static

static

10

5b47333163...2N.exe

windows7-x64

10

5b47333163...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b47333163ebb44b30b8a7053bf7ab588158660838adbbabc9ef99e9c0eacb52N.exe

  • Size

    1.1MB

  • Sample

    241208-c1ezkasrdj

  • MD5

    04c29591316f9c05d51fdb076e0cd560

  • SHA1

    9c74276be8fd860c0294909ec488062f5d5643e7

  • SHA256

    5b47333163ebb44b30b8a7053bf7ab588158660838adbbabc9ef99e9c0eacb52

  • SHA512

    72ef7b15e859cc623e5d5a5be565fc0e74f6142273726e70a0af1e1b45492bca64f9645534748bcc5820e50b054c14bd863d402afde91b9f54066994458a079f

  • SSDEEP

    12288:qNU8BCNNpllFFCH5LvNzbjeA/ao/C3av8itjd5aZxd11h6TpcdHcH52zHkpvyJlz:HJNF6jeAh78Md5a3dDkTkHcYIpvyTz

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      5b47333163ebb44b30b8a7053bf7ab588158660838adbbabc9ef99e9c0eacb52N.exe

    • Size

      1.1MB

    • MD5

      04c29591316f9c05d51fdb076e0cd560

    • SHA1

      9c74276be8fd860c0294909ec488062f5d5643e7

    • SHA256

      5b47333163ebb44b30b8a7053bf7ab588158660838adbbabc9ef99e9c0eacb52

    • SHA512

      72ef7b15e859cc623e5d5a5be565fc0e74f6142273726e70a0af1e1b45492bca64f9645534748bcc5820e50b054c14bd863d402afde91b9f54066994458a079f

    • SSDEEP

      12288:qNU8BCNNpllFFCH5LvNzbjeA/ao/C3av8itjd5aZxd11h6TpcdHcH52zHkpvyJlz:HJNF6jeAh78Md5a3dDkTkHcYIpvyTz

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks