Overview

overview

10

Static

static

10

b4743683f3...aN.exe

windows7-x64

10

b4743683f3...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4743683f3963ff5710b67b5d112dfa27d113ae28f662e482063c36718c84c3aN.exe

  • Size

    353KB

  • Sample

    241219-mh78hazrgw

  • MD5

    710fd2c08303552769770e0f3ffa9f30

  • SHA1

    08889411cb97c4035f47b2b137ebd07cf84134e9

  • SHA256

    b4743683f3963ff5710b67b5d112dfa27d113ae28f662e482063c36718c84c3a

  • SHA512

    7cd1b18358eb30d95fb6894718a83d4c1bd2b0ebfe8a19844004b4812849f2b833615a8ca4bfd218b6ce9673e56cc8240a46f2109d74e9d7898f2c5f5373cd85

  • SSDEEP

    6144:k97y+Bumd0HzbtkMLsfnlYQoht7fhYnQhY7rAjWO:n+Z0HtIlYQonfa7rAjWO

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      b4743683f3963ff5710b67b5d112dfa27d113ae28f662e482063c36718c84c3aN.exe

    • Size

      353KB

    • MD5

      710fd2c08303552769770e0f3ffa9f30

    • SHA1

      08889411cb97c4035f47b2b137ebd07cf84134e9

    • SHA256

      b4743683f3963ff5710b67b5d112dfa27d113ae28f662e482063c36718c84c3a

    • SHA512

      7cd1b18358eb30d95fb6894718a83d4c1bd2b0ebfe8a19844004b4812849f2b833615a8ca4bfd218b6ce9673e56cc8240a46f2109d74e9d7898f2c5f5373cd85

    • SSDEEP

      6144:k97y+Bumd0HzbtkMLsfnlYQoht7fhYnQhY7rAjWO:n+Z0HtIlYQonfa7rAjWO

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks