Overview

overview

10

Static

static

10

42885e725d...7N.exe

windows7-x64

10

42885e725d...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42885e725ddc542c02a88eb5f2f8ae27bbbfe324621ea70fc451bc6c9b7537b7N.exe

  • Size

    1.9MB

  • Sample

    241219-mhv8yazrfv

  • MD5

    e7951990f9660015421fbf3fb3b5e370

  • SHA1

    76ad1798ed94ba7076f8885b66c0e2785bfb8dd3

  • SHA256

    42885e725ddc542c02a88eb5f2f8ae27bbbfe324621ea70fc451bc6c9b7537b7

  • SHA512

    c4e8e10ce6c2f4bc36d74a636bad49ac7ed69499872a07b940e67ffe36a01adfad1896503770cb665ee39dacaf911ec2eecd7b41ba9fef187f8455ea815a19b4

  • SSDEEP

    49152:5HAG99hUyaIgaxksRCESsnrLOYu6NmlccPze5:+G99Z7xksRC1qVeo

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      42885e725ddc542c02a88eb5f2f8ae27bbbfe324621ea70fc451bc6c9b7537b7N.exe

    • Size

      1.9MB

    • MD5

      e7951990f9660015421fbf3fb3b5e370

    • SHA1

      76ad1798ed94ba7076f8885b66c0e2785bfb8dd3

    • SHA256

      42885e725ddc542c02a88eb5f2f8ae27bbbfe324621ea70fc451bc6c9b7537b7

    • SHA512

      c4e8e10ce6c2f4bc36d74a636bad49ac7ed69499872a07b940e67ffe36a01adfad1896503770cb665ee39dacaf911ec2eecd7b41ba9fef187f8455ea815a19b4

    • SSDEEP

      49152:5HAG99hUyaIgaxksRCESsnrLOYu6NmlccPze5:+G99Z7xksRC1qVeo

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks