Overview

overview

10

Static

static

10

2b88fd6780...bN.exe

windows7-x64

10

2b88fd6780...bN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b88fd67802e891207da89441818c1c563229dbecb71626785a1ce08a461faabN.exe

  • Size

    40KB

  • Sample

    241225-y6dvcawmds

  • MD5

    ec5af63b307901e422c3e06532ee3620

  • SHA1

    3b1e2e40b57a0e9bf8213815bca7f336a235d2c2

  • SHA256

    2b88fd67802e891207da89441818c1c563229dbecb71626785a1ce08a461faab

  • SHA512

    f16a798b3c4dc160c0c88942fe1c8fa9bb252a8e7b0ae007bea37cc9f1d85fd5f550efd453a364e840c9dcc92a6f1dfa8eadaf62727d440ee97202826b79b3a2

  • SSDEEP

    768:KyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJvPn:9xqjQ+P04wsmJCiv

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      2b88fd67802e891207da89441818c1c563229dbecb71626785a1ce08a461faabN.exe

    • Size

      40KB

    • MD5

      ec5af63b307901e422c3e06532ee3620

    • SHA1

      3b1e2e40b57a0e9bf8213815bca7f336a235d2c2

    • SHA256

      2b88fd67802e891207da89441818c1c563229dbecb71626785a1ce08a461faab

    • SHA512

      f16a798b3c4dc160c0c88942fe1c8fa9bb252a8e7b0ae007bea37cc9f1d85fd5f550efd453a364e840c9dcc92a6f1dfa8eadaf62727d440ee97202826b79b3a2

    • SSDEEP

      768:KyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJvPn:9xqjQ+P04wsmJCiv

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks