Overview

overview

10

Static

static

10

9fc0a90722...fN.exe

windows7-x64

10

9fc0a90722...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9fc0a90722b0ecbee49cf2dbc6a1dcd1139c8c3be9457997349a1768a1d5f89fN.exe

  • Size

    189KB

  • Sample

    241219-fzcdts1lck

  • MD5

    7982b9ea2789b0808a87771579b7c340

  • SHA1

    dde07e54aa1a5614fb3f3ad59a93a6b4a3a04cd9

  • SHA256

    9fc0a90722b0ecbee49cf2dbc6a1dcd1139c8c3be9457997349a1768a1d5f89f

  • SHA512

    2893b85601c3d5068fe5ff210b49c74c59d36a57e5df83cb981a0c1fa9918bffb1e50ecb34f57abc57050055febe6cb42038c5ae4f021f002f6c5c048293ad12

  • SSDEEP

    3072:sr85CLgn0K+1GFcQBD3zS3eGyld+z1A2lkXKK1m+q:k9qjZV3zS3eGyiZA2lk6wm+q

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      9fc0a90722b0ecbee49cf2dbc6a1dcd1139c8c3be9457997349a1768a1d5f89fN.exe

    • Size

      189KB

    • MD5

      7982b9ea2789b0808a87771579b7c340

    • SHA1

      dde07e54aa1a5614fb3f3ad59a93a6b4a3a04cd9

    • SHA256

      9fc0a90722b0ecbee49cf2dbc6a1dcd1139c8c3be9457997349a1768a1d5f89f

    • SHA512

      2893b85601c3d5068fe5ff210b49c74c59d36a57e5df83cb981a0c1fa9918bffb1e50ecb34f57abc57050055febe6cb42038c5ae4f021f002f6c5c048293ad12

    • SSDEEP

      3072:sr85CLgn0K+1GFcQBD3zS3eGyld+z1A2lkXKK1m+q:k9qjZV3zS3eGyiZA2lk6wm+q

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks