Overview

overview

10

Static

static

10

fdc4494e79...3d.exe

windows7-x64

10

fdc4494e79...3d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdc4494e7988bd144dfb7c6ae73b765e2a8bdfba0a7ea4e3800fb39dfe13d73d

  • Size

    40KB

  • Sample

    250111-k754bsxjan

  • MD5

    2e8697e5d417c7ef9d8ea6e575a3ea8d

  • SHA1

    1d726ba6decca64b7f34a773f7df8ca4c24e0ae8

  • SHA256

    fdc4494e7988bd144dfb7c6ae73b765e2a8bdfba0a7ea4e3800fb39dfe13d73d

  • SHA512

    49449cb6a5f78ae484b74d349b66008544d57ba2d5475ebbcbd5527a389df70d23d2daf169bb659148732c968e12fd68c6631d9be33d774bae1a328ec831d6f0

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJna08CJ:JxqjQ+P04wsmJCC18CJ

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      fdc4494e7988bd144dfb7c6ae73b765e2a8bdfba0a7ea4e3800fb39dfe13d73d

    • Size

      40KB

    • MD5

      2e8697e5d417c7ef9d8ea6e575a3ea8d

    • SHA1

      1d726ba6decca64b7f34a773f7df8ca4c24e0ae8

    • SHA256

      fdc4494e7988bd144dfb7c6ae73b765e2a8bdfba0a7ea4e3800fb39dfe13d73d

    • SHA512

      49449cb6a5f78ae484b74d349b66008544d57ba2d5475ebbcbd5527a389df70d23d2daf169bb659148732c968e12fd68c6631d9be33d774bae1a328ec831d6f0

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJna08CJ:JxqjQ+P04wsmJCC18CJ

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks