Overview

overview

10

Static

static

10

c981ab492f...7N.exe

windows7-x64

10

c981ab492f...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c981ab492fd3747d89453674505f6aadefdfe54c1806a30a52efae343cc6ecb7N.exe

  • Size

    146KB

  • Sample

    241231-t9vj2szjbt

  • MD5

    8d4cf62606cad1a6d8f20a0aa95c7570

  • SHA1

    c20ca35d42adc1d617805369961734e6725319e1

  • SHA256

    c981ab492fd3747d89453674505f6aadefdfe54c1806a30a52efae343cc6ecb7

  • SHA512

    2b20f8fd106c791bd0f6a8b74ae94ed16f9f3ac9897d868c7d8a18bef616870108ba580b182300a3cee79db1d94b40a44ff48c61a59fad012efdeb69de1a2c4f

  • SSDEEP

    3072:sr85CkkbAYn2GgYlBYN2fHYTo+hUt8wDSRUTT:k9xbAMpgY3gTu8DRUTT

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      c981ab492fd3747d89453674505f6aadefdfe54c1806a30a52efae343cc6ecb7N.exe

    • Size

      146KB

    • MD5

      8d4cf62606cad1a6d8f20a0aa95c7570

    • SHA1

      c20ca35d42adc1d617805369961734e6725319e1

    • SHA256

      c981ab492fd3747d89453674505f6aadefdfe54c1806a30a52efae343cc6ecb7

    • SHA512

      2b20f8fd106c791bd0f6a8b74ae94ed16f9f3ac9897d868c7d8a18bef616870108ba580b182300a3cee79db1d94b40a44ff48c61a59fad012efdeb69de1a2c4f

    • SSDEEP

      3072:sr85CkkbAYn2GgYlBYN2fHYTo+hUt8wDSRUTT:k9xbAMpgY3gTu8DRUTT

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks