Overview

overview

10

Static

static

10

5a0974b166...c1.exe

windows7-x64

10

5a0974b166...c1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a0974b166970d910ad41b8fc9493c7bf94ea4d2545b6a1c84d938021bf091c1.exe

  • Size

    98KB

  • Sample

    250101-xarwnaxpex

  • MD5

    8e9f1416756aeecc7bb0af9566c8231a

  • SHA1

    c9653d2ac9b1d2e46136d691df5b746c3e64b5dd

  • SHA256

    5a0974b166970d910ad41b8fc9493c7bf94ea4d2545b6a1c84d938021bf091c1

  • SHA512

    f28eea4559ebce5034e94895d63aee8a4810b2cf4aedbc031d0fb81cd000d3eea0e74edfd8dcd6df8f7543189112b9e91428a78ec54671a6888953dcdaf1cbc3

  • SSDEEP

    1536:JxqjQ+P04wsmJCNQi54QDAAnxIda+6G9/++VjEtKAD+J:sr85CNQi5pDAAxUthv8KASJ

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      5a0974b166970d910ad41b8fc9493c7bf94ea4d2545b6a1c84d938021bf091c1.exe

    • Size

      98KB

    • MD5

      8e9f1416756aeecc7bb0af9566c8231a

    • SHA1

      c9653d2ac9b1d2e46136d691df5b746c3e64b5dd

    • SHA256

      5a0974b166970d910ad41b8fc9493c7bf94ea4d2545b6a1c84d938021bf091c1

    • SHA512

      f28eea4559ebce5034e94895d63aee8a4810b2cf4aedbc031d0fb81cd000d3eea0e74edfd8dcd6df8f7543189112b9e91428a78ec54671a6888953dcdaf1cbc3

    • SSDEEP

      1536:JxqjQ+P04wsmJCNQi54QDAAnxIda+6G9/++VjEtKAD+J:sr85CNQi5pDAAxUthv8KASJ

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks