Overview

overview

10

Static

static

10

aa0dfd76d4...62.exe

windows7-x64

10

aa0dfd76d4...62.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa0dfd76d4d46bafce1f8d7ef08a5e50d7a15ce775fd9d90e257d8eafe31e262.exe

  • Size

    1.9MB

  • Sample

    241219-cd26ksspgl

  • MD5

    703aa8d217ae2f194011e9b0201a79f6

  • SHA1

    67af8ca0fd234945a086d909b6461335f0fed660

  • SHA256

    aa0dfd76d4d46bafce1f8d7ef08a5e50d7a15ce775fd9d90e257d8eafe31e262

  • SHA512

    7bea1c63300d4651bafe497da9e92e5fa13f25479a00456b7d645cf101be34fefaf57406b0b0791d216e3532e41f4b38ff6b88b21d9672ad925dca7499e1e555

  • SSDEEP

    49152:5HAG99hUyaIgaxksRCESsnrLOYu6NmlccPzeh:+G99Z7xksRC1qVeo

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      aa0dfd76d4d46bafce1f8d7ef08a5e50d7a15ce775fd9d90e257d8eafe31e262.exe

    • Size

      1.9MB

    • MD5

      703aa8d217ae2f194011e9b0201a79f6

    • SHA1

      67af8ca0fd234945a086d909b6461335f0fed660

    • SHA256

      aa0dfd76d4d46bafce1f8d7ef08a5e50d7a15ce775fd9d90e257d8eafe31e262

    • SHA512

      7bea1c63300d4651bafe497da9e92e5fa13f25479a00456b7d645cf101be34fefaf57406b0b0791d216e3532e41f4b38ff6b88b21d9672ad925dca7499e1e555

    • SSDEEP

      49152:5HAG99hUyaIgaxksRCESsnrLOYu6NmlccPzeh:+G99Z7xksRC1qVeo

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks