Overview

overview

10

Static

static

10

3425208cd6...8N.exe

windows7-x64

10

3425208cd6...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3425208cd6ed0817d30af97ba9c9f129b1c50ede1b0d9e10ba1aec0804a1e1d8N.exe

  • Size

    3.8MB

  • Sample

    241219-nvs5sasqft

  • MD5

    c0f00d40b5048881aa513e11afbc7e80

  • SHA1

    1136a668ed349fc4644c637deee0b680adf3f2c2

  • SHA256

    3425208cd6ed0817d30af97ba9c9f129b1c50ede1b0d9e10ba1aec0804a1e1d8

  • SHA512

    4e547dec85a879e43d39bccbc89677dfff3ec9484ce836bcf7e1d763dafce44ba236cd29a4a32e718babc2a4ecb2750184bfcbc6a1103c36e263526cfbd19426

  • SSDEEP

    49152:UO687DbkbaJlR2nzRyWfmqzZHeBwTp+WSoiET2scTibLkWZ:UmpKmo0spbYQ

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      3425208cd6ed0817d30af97ba9c9f129b1c50ede1b0d9e10ba1aec0804a1e1d8N.exe

    • Size

      3.8MB

    • MD5

      c0f00d40b5048881aa513e11afbc7e80

    • SHA1

      1136a668ed349fc4644c637deee0b680adf3f2c2

    • SHA256

      3425208cd6ed0817d30af97ba9c9f129b1c50ede1b0d9e10ba1aec0804a1e1d8

    • SHA512

      4e547dec85a879e43d39bccbc89677dfff3ec9484ce836bcf7e1d763dafce44ba236cd29a4a32e718babc2a4ecb2750184bfcbc6a1103c36e263526cfbd19426

    • SSDEEP

      49152:UO687DbkbaJlR2nzRyWfmqzZHeBwTp+WSoiET2scTibLkWZ:UmpKmo0spbYQ

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks