Overview

overview

10

Static

static

10

06152dc163...3N.exe

windows7-x64

10

06152dc163...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06152dc1635a5cc81c60aa1287fe26b3903c7a6e40b48e53b8044774a52aab43N.exe

  • Size

    2.2MB

  • Sample

    250101-2rckhsyncs

  • MD5

    8e08d75cb007f9bf71843718b30496e0

  • SHA1

    ebc787f3e90cd199ec169d0bc06e8dec966bdf86

  • SHA256

    06152dc1635a5cc81c60aa1287fe26b3903c7a6e40b48e53b8044774a52aab43

  • SHA512

    884f0d3e011394e02c7ac0ac1afc786ab86153f3180b9aa6711e7b5750dfed5e62a8200b013c91fb1c74fe7f89c1087251a0aa4f6ccc37f72d65240f975abe4a

  • SSDEEP

    49152:9GNnYqLdMayBxQcpH+jiW/bHZAIJTiwyl:adspH/W/2l

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      06152dc1635a5cc81c60aa1287fe26b3903c7a6e40b48e53b8044774a52aab43N.exe

    • Size

      2.2MB

    • MD5

      8e08d75cb007f9bf71843718b30496e0

    • SHA1

      ebc787f3e90cd199ec169d0bc06e8dec966bdf86

    • SHA256

      06152dc1635a5cc81c60aa1287fe26b3903c7a6e40b48e53b8044774a52aab43

    • SHA512

      884f0d3e011394e02c7ac0ac1afc786ab86153f3180b9aa6711e7b5750dfed5e62a8200b013c91fb1c74fe7f89c1087251a0aa4f6ccc37f72d65240f975abe4a

    • SSDEEP

      49152:9GNnYqLdMayBxQcpH+jiW/bHZAIJTiwyl:adspH/W/2l

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks