Overview

overview

10

Static

static

10

357dde5e58...fN.exe

windows7-x64

10

357dde5e58...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    357dde5e589f8e1fa91d1748d516c8bf0b6a4df6ceb0fa428109bd8888c8191fN.exe

  • Size

    1.2MB

  • Sample

    250110-3xh5xswnel

  • MD5

    85c073d51f5e4c1199104dfd2f886320

  • SHA1

    b7164387b4820cd52377270128f1059442aa0db5

  • SHA256

    357dde5e589f8e1fa91d1748d516c8bf0b6a4df6ceb0fa428109bd8888c8191f

  • SHA512

    390ca7a2d3894f9d3c9231579531cee8549f6b02c522251a2a9ebd0c40597dc546e648be1adaa40641c65c376a8c74aae7f38de187c65f76608b0425f1b4581f

  • SSDEEP

    12288:4I09DyPgBbCbsdPGPosmc1eNY3dn9DyPH9DyPXj:4TZhBLsmcDnZWZ2j

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      357dde5e589f8e1fa91d1748d516c8bf0b6a4df6ceb0fa428109bd8888c8191fN.exe

    • Size

      1.2MB

    • MD5

      85c073d51f5e4c1199104dfd2f886320

    • SHA1

      b7164387b4820cd52377270128f1059442aa0db5

    • SHA256

      357dde5e589f8e1fa91d1748d516c8bf0b6a4df6ceb0fa428109bd8888c8191f

    • SHA512

      390ca7a2d3894f9d3c9231579531cee8549f6b02c522251a2a9ebd0c40597dc546e648be1adaa40641c65c376a8c74aae7f38de187c65f76608b0425f1b4581f

    • SSDEEP

      12288:4I09DyPgBbCbsdPGPosmc1eNY3dn9DyPH9DyPXj:4TZhBLsmcDnZWZ2j

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks