Overview

overview

10

Static

static

10

1ae8b53a8e...d3.exe

windows7-x64

10

1ae8b53a8e...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ae8b53a8ecba37dbb968c0ba1e6245060a353b05e90ffbe77eaa0ee18b22bd3.exe

  • Size

    96KB

  • Sample

    250110-z5vl5szqaj

  • MD5

    12eb73a654bc72c52fe9b8ded0c15089

  • SHA1

    6bd8b8a0f8075b7ecaf7a123fd3d517b0e934df0

  • SHA256

    1ae8b53a8ecba37dbb968c0ba1e6245060a353b05e90ffbe77eaa0ee18b22bd3

  • SHA512

    d15e8e001fd9bc515ae17548432fb01fb7dcb78657bd9d523ca74e981afaa5f9d363b21abe44c6eb248943b4bf84b48eb8945514d3f183f7dd94c37ea513fae4

  • SSDEEP

    1536:JxqjQ+P04wsmJCJcadB73xzUobbpTiFbPCp5V3z:sr85C+SB9Ti+p5Vz

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      1ae8b53a8ecba37dbb968c0ba1e6245060a353b05e90ffbe77eaa0ee18b22bd3.exe

    • Size

      96KB

    • MD5

      12eb73a654bc72c52fe9b8ded0c15089

    • SHA1

      6bd8b8a0f8075b7ecaf7a123fd3d517b0e934df0

    • SHA256

      1ae8b53a8ecba37dbb968c0ba1e6245060a353b05e90ffbe77eaa0ee18b22bd3

    • SHA512

      d15e8e001fd9bc515ae17548432fb01fb7dcb78657bd9d523ca74e981afaa5f9d363b21abe44c6eb248943b4bf84b48eb8945514d3f183f7dd94c37ea513fae4

    • SSDEEP

      1536:JxqjQ+P04wsmJCJcadB73xzUobbpTiFbPCp5V3z:sr85C+SB9Ti+p5Vz

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks