Overview

overview

10

Static

static

10

a21efa0f1b...a5.exe

windows7-x64

10

a21efa0f1b...a5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a21efa0f1bc3d3830562d163ef52b810b8a9080b68c20f121405772456a022a5.exe

  • Size

    86KB

  • Sample

    241230-w1hj8svphv

  • MD5

    59b4435ca4e34d6e41c7e8a0cc419338

  • SHA1

    0a64873fc3c7ff624bbde94b690ae0f562c60a80

  • SHA256

    a21efa0f1bc3d3830562d163ef52b810b8a9080b68c20f121405772456a022a5

  • SHA512

    7a71bbce32acbf83f3b54b339594bf90e853e0ce90c60f99538c09d60f2c44b9e333b88b1b69c698a6c38cd545dce60501991c0f4a8a4668739444124ca98ae5

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJaL7bWvpeUlDmq/oAUSNidddMkQTTWgh:JxqjQ+P04wsmJCdjaMISqAAUSNWdyl7

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      a21efa0f1bc3d3830562d163ef52b810b8a9080b68c20f121405772456a022a5.exe

    • Size

      86KB

    • MD5

      59b4435ca4e34d6e41c7e8a0cc419338

    • SHA1

      0a64873fc3c7ff624bbde94b690ae0f562c60a80

    • SHA256

      a21efa0f1bc3d3830562d163ef52b810b8a9080b68c20f121405772456a022a5

    • SHA512

      7a71bbce32acbf83f3b54b339594bf90e853e0ce90c60f99538c09d60f2c44b9e333b88b1b69c698a6c38cd545dce60501991c0f4a8a4668739444124ca98ae5

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJaL7bWvpeUlDmq/oAUSNidddMkQTTWgh:JxqjQ+P04wsmJCdjaMISqAAUSNWdyl7

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks