Overview

overview

10

Static

static

10

72696670a5...1N.exe

windows7-x64

10

72696670a5...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72696670a50f2b42804a3284d586b458cb4a32850dd94314b0880f65eebe4731N.exe

  • Size

    146KB

  • Sample

    241231-tyrzsaynaw

  • MD5

    374584f8f8f0008943a0ba70440897d0

  • SHA1

    5cc22fe973271ea1d150c4f0d7bbfecfd9a29c03

  • SHA256

    72696670a50f2b42804a3284d586b458cb4a32850dd94314b0880f65eebe4731

  • SHA512

    e9724da3281a096fbfd3b7f971f4c861d6ab9e02b1885b9a3d04e3b04fdd1740ed5280f3a1e012465ec2e709e2df942ce2b4bab34df8a9117b3c453bd50adf96

  • SSDEEP

    3072:sr85CkkbAYn2GgYlBYN2fHYTo+nFt8wDSRUTT:k9xbAMpgY3gTP8DRUTT

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      72696670a50f2b42804a3284d586b458cb4a32850dd94314b0880f65eebe4731N.exe

    • Size

      146KB

    • MD5

      374584f8f8f0008943a0ba70440897d0

    • SHA1

      5cc22fe973271ea1d150c4f0d7bbfecfd9a29c03

    • SHA256

      72696670a50f2b42804a3284d586b458cb4a32850dd94314b0880f65eebe4731

    • SHA512

      e9724da3281a096fbfd3b7f971f4c861d6ab9e02b1885b9a3d04e3b04fdd1740ed5280f3a1e012465ec2e709e2df942ce2b4bab34df8a9117b3c453bd50adf96

    • SSDEEP

      3072:sr85CkkbAYn2GgYlBYN2fHYTo+nFt8wDSRUTT:k9xbAMpgY3gTP8DRUTT

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks