Overview

overview

10

Static

static

10

64de5bd60d...4N.exe

windows7-x64

10

64de5bd60d...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64de5bd60d78801ec90fce3ccd0f0c7cb285b9470d6b88cb2d2ad359d467ae04N.exe

  • Size

    40KB

  • Sample

    241216-qv17ha1qdv

  • MD5

    4a7f37a00f1a8ea594614a26e51bafd0

  • SHA1

    70a75b3eabf1afe65291baa9c5423d5c564adba9

  • SHA256

    64de5bd60d78801ec90fce3ccd0f0c7cb285b9470d6b88cb2d2ad359d467ae04

  • SHA512

    fea7a9ad54371809041679eda091b051ea426d372415e899d3adcbaa835c6723cf484aa643837ce0b8fa9efba24c7a81acf38d473a28f83e321b011ea8edead1

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      64de5bd60d78801ec90fce3ccd0f0c7cb285b9470d6b88cb2d2ad359d467ae04N.exe

    • Size

      40KB

    • MD5

      4a7f37a00f1a8ea594614a26e51bafd0

    • SHA1

      70a75b3eabf1afe65291baa9c5423d5c564adba9

    • SHA256

      64de5bd60d78801ec90fce3ccd0f0c7cb285b9470d6b88cb2d2ad359d467ae04

    • SHA512

      fea7a9ad54371809041679eda091b051ea426d372415e899d3adcbaa835c6723cf484aa643837ce0b8fa9efba24c7a81acf38d473a28f83e321b011ea8edead1

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks