Overview

overview

10

Static

static

10

13c74c2bc7...8N.exe

windows7-x64

10

13c74c2bc7...8N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13c74c2bc7f2e760250e34d7551a855f08d9382f5591cfda73c36a7045b009c8N.exe

  • Size

    227KB

  • Sample

    250102-hzn4qszmhw

  • MD5

    b8bb7885553b459baad43e5350e34c80

  • SHA1

    e863c7f20e7264fb076f3995c25a9bb9a6e46ae6

  • SHA256

    13c74c2bc7f2e760250e34d7551a855f08d9382f5591cfda73c36a7045b009c8

  • SHA512

    228f6ed63c02408b7447332354c4c26931b4f39bef5c5a4746360eb1a0889b0b6a9bb63c66655f7a94bb3b30a31ecd398850d343cf2be2d64d4b26cb7768fbcb

  • SSDEEP

    3072:sr85CD7Xk4tSvpPWa6DqhRhfPq6r7RjpZPbo0OigGuTGRyEEOb9:k9D7kKSvpphfV3RjpZa8vZ

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      13c74c2bc7f2e760250e34d7551a855f08d9382f5591cfda73c36a7045b009c8N.exe

    • Size

      227KB

    • MD5

      b8bb7885553b459baad43e5350e34c80

    • SHA1

      e863c7f20e7264fb076f3995c25a9bb9a6e46ae6

    • SHA256

      13c74c2bc7f2e760250e34d7551a855f08d9382f5591cfda73c36a7045b009c8

    • SHA512

      228f6ed63c02408b7447332354c4c26931b4f39bef5c5a4746360eb1a0889b0b6a9bb63c66655f7a94bb3b30a31ecd398850d343cf2be2d64d4b26cb7768fbcb

    • SSDEEP

      3072:sr85CD7Xk4tSvpPWa6DqhRhfPq6r7RjpZPbo0OigGuTGRyEEOb9:k9D7kKSvpphfV3RjpZa8vZ

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks