Overview

overview

10

Static

static

10

f2daa0f587...ed.exe

windows7-x64

10

f2daa0f587...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f2daa0f58706efb872f076a07738a48cffc7d717d0131bf6ed3db6cf103231ed.exe

  • Size

    1.3MB

  • Sample

    250102-m74llssjdp

  • MD5

    566609cff50d4378edc87614f5673212

  • SHA1

    32db6c4f6b4f3c32679b8795b60a3a5eff87cc86

  • SHA256

    f2daa0f58706efb872f076a07738a48cffc7d717d0131bf6ed3db6cf103231ed

  • SHA512

    67278502f577554064a2396366f512f7a2e2b89a2006a4ff2d47c314c99ee19cabe430214b34529b4ff9452e2854a8c97ab074c701aec136b42e7686ec4e4ed5

  • SSDEEP

    24576:ErJM97lqsld7eLvcYrZ3vWWWhUo8f9gdeSklhopgsdC7tDJkfihY4:6JM9xqY2F3vWNU9pS4sdytuae4

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      f2daa0f58706efb872f076a07738a48cffc7d717d0131bf6ed3db6cf103231ed.exe

    • Size

      1.3MB

    • MD5

      566609cff50d4378edc87614f5673212

    • SHA1

      32db6c4f6b4f3c32679b8795b60a3a5eff87cc86

    • SHA256

      f2daa0f58706efb872f076a07738a48cffc7d717d0131bf6ed3db6cf103231ed

    • SHA512

      67278502f577554064a2396366f512f7a2e2b89a2006a4ff2d47c314c99ee19cabe430214b34529b4ff9452e2854a8c97ab074c701aec136b42e7686ec4e4ed5

    • SSDEEP

      24576:ErJM97lqsld7eLvcYrZ3vWWWhUo8f9gdeSklhopgsdC7tDJkfihY4:6JM9xqY2F3vWNU9pS4sdytuae4

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks