Overview

overview

10

Static

static

10

84fb245d6a...3N.exe

windows7-x64

10

84fb245d6a...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84fb245d6a7ebd896ba065a70eb921b8fe80cc5307594f4b8bad649590ffb6d3N.exe

  • Size

    146KB

  • Sample

    250107-gg5s4aypdl

  • MD5

    1d7939f869ada3775c93ac247b80f400

  • SHA1

    d9f8e860b17d4e6279f8dd528b676122f0649eed

  • SHA256

    84fb245d6a7ebd896ba065a70eb921b8fe80cc5307594f4b8bad649590ffb6d3

  • SHA512

    eed84a33a25d08f2238e7e992f5d8d8a1b835abf346d58dd6aba4339697462c5b19c88ba23414e4cfd6742b9d69d4b5b864eebe019d8c23ffe78979397badb2e

  • SSDEEP

    3072:sr85CkkbAYn2GgYlBYN2fHYTo+NXt8wDSRUTT:k9xbAMpgY3gTb8DRUTT

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      84fb245d6a7ebd896ba065a70eb921b8fe80cc5307594f4b8bad649590ffb6d3N.exe

    • Size

      146KB

    • MD5

      1d7939f869ada3775c93ac247b80f400

    • SHA1

      d9f8e860b17d4e6279f8dd528b676122f0649eed

    • SHA256

      84fb245d6a7ebd896ba065a70eb921b8fe80cc5307594f4b8bad649590ffb6d3

    • SHA512

      eed84a33a25d08f2238e7e992f5d8d8a1b835abf346d58dd6aba4339697462c5b19c88ba23414e4cfd6742b9d69d4b5b864eebe019d8c23ffe78979397badb2e

    • SSDEEP

      3072:sr85CkkbAYn2GgYlBYN2fHYTo+NXt8wDSRUTT:k9xbAMpgY3gTb8DRUTT

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks