Overview

overview

10

Static

static

10

865e4d2763...7N.exe

windows7-x64

10

865e4d2763...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    865e4d276373faf8ad2c3735463df5bcfd49a957af68d2e1f1ef669a9e9621a7N.exe

  • Size

    40KB

  • Sample

    241231-gdlk2szqf1

  • MD5

    573d16b2bd1064c70dc9c819077ab010

  • SHA1

    4b3542a54711c178ae9ddb6af3a16bfa4e59c01b

  • SHA256

    865e4d276373faf8ad2c3735463df5bcfd49a957af68d2e1f1ef669a9e9621a7

  • SHA512

    3d2bdb221473b5b94dd2eb4b86d952436bdc309b51158287d8d8a6d9c3899aec546c2cd8ab22c4566a431e80d437d1c7b530569c563c41e34a372ff55383704c

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      865e4d276373faf8ad2c3735463df5bcfd49a957af68d2e1f1ef669a9e9621a7N.exe

    • Size

      40KB

    • MD5

      573d16b2bd1064c70dc9c819077ab010

    • SHA1

      4b3542a54711c178ae9ddb6af3a16bfa4e59c01b

    • SHA256

      865e4d276373faf8ad2c3735463df5bcfd49a957af68d2e1f1ef669a9e9621a7

    • SHA512

      3d2bdb221473b5b94dd2eb4b86d952436bdc309b51158287d8d8a6d9c3899aec546c2cd8ab22c4566a431e80d437d1c7b530569c563c41e34a372ff55383704c

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks