Overview

overview

10

Static

static

10

8694844ad6...dc.exe

windows7-x64

10

8694844ad6...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8694844ad6e9f4a17d8e3e644245664cbad9454009399d361ff37350e29894dc.exe

  • Size

    117KB

  • Sample

    250102-mg2z4azrdj

  • MD5

    9e6357e90b24bbe223253e246866ed47

  • SHA1

    75fb1b7bd47abadc30f4ccbe5dec36581ff5e0ad

  • SHA256

    8694844ad6e9f4a17d8e3e644245664cbad9454009399d361ff37350e29894dc

  • SHA512

    b182b10fb7d969dc36b4b6d5fc032c6f7ec300d8acd2ef09de3fcec9445c57aa2c6adecb7a36d320e508e9613ebe8ade361129afb469c06c4508998ba8d23d9b

  • SSDEEP

    1536:JxqjQ+P04wsmJCrMguD7Uu7pazfZaDUyOZB7PdO+FeWI7oPFgddRmn:sr85CoguDbKfZa4R7PVeWIUdSm

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      8694844ad6e9f4a17d8e3e644245664cbad9454009399d361ff37350e29894dc.exe

    • Size

      117KB

    • MD5

      9e6357e90b24bbe223253e246866ed47

    • SHA1

      75fb1b7bd47abadc30f4ccbe5dec36581ff5e0ad

    • SHA256

      8694844ad6e9f4a17d8e3e644245664cbad9454009399d361ff37350e29894dc

    • SHA512

      b182b10fb7d969dc36b4b6d5fc032c6f7ec300d8acd2ef09de3fcec9445c57aa2c6adecb7a36d320e508e9613ebe8ade361129afb469c06c4508998ba8d23d9b

    • SSDEEP

      1536:JxqjQ+P04wsmJCrMguD7Uu7pazfZaDUyOZB7PdO+FeWI7oPFgddRmn:sr85CoguDbKfZa4R7PVeWIUdSm

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks