Overview

overview

10

Static

static

10

4af3399158...06.exe

windows7-x64

10

4af3399158...06.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4af3399158971d9ebf1800024e27f9009c9980ea0d618b85a2d806bfcd26f606.exe

  • Size

    179KB

  • Sample

    250101-v6dmssxphl

  • MD5

    4d5535bec4d3455a8d796de78ad0b704

  • SHA1

    23b3634086ce2980991efee6efe6e6c637a3cf68

  • SHA256

    4af3399158971d9ebf1800024e27f9009c9980ea0d618b85a2d806bfcd26f606

  • SHA512

    9c52e947733e76a8f28048c50c47ced94bbfe63e8ce974ab94850233cde36dbaa8ef9a970832e7364ffe60ab1dd9d28d61b66959257077d4a350568a9b269016

  • SSDEEP

    3072:sr85C+qz77I0+R60u4dF7TsosehRc5IqZPery17MwNWuFA:k9+qY/PQ5IqZPf1BsuFA

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      4af3399158971d9ebf1800024e27f9009c9980ea0d618b85a2d806bfcd26f606.exe

    • Size

      179KB

    • MD5

      4d5535bec4d3455a8d796de78ad0b704

    • SHA1

      23b3634086ce2980991efee6efe6e6c637a3cf68

    • SHA256

      4af3399158971d9ebf1800024e27f9009c9980ea0d618b85a2d806bfcd26f606

    • SHA512

      9c52e947733e76a8f28048c50c47ced94bbfe63e8ce974ab94850233cde36dbaa8ef9a970832e7364ffe60ab1dd9d28d61b66959257077d4a350568a9b269016

    • SSDEEP

      3072:sr85C+qz77I0+R60u4dF7TsosehRc5IqZPery17MwNWuFA:k9+qY/PQ5IqZPf1BsuFA

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks