Overview

overview

10

Static

static

10

3f3c4b0e4a...7f.exe

windows7-x64

10

3f3c4b0e4a...7f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f3c4b0e4a8239cb794fb6ca795b540b5b4fb08bc0786dec687ca5cc4b04f77f.exe

  • Size

    598KB

  • Sample

    250121-g9g8ha1jgw

  • MD5

    dd9e93233b60e1c945fec2e72243f910

  • SHA1

    c7832f94b00d18d8397fe67e9efd96c0b6893122

  • SHA256

    3f3c4b0e4a8239cb794fb6ca795b540b5b4fb08bc0786dec687ca5cc4b04f77f

  • SHA512

    d7fa46b4b82b765f644dbbaf91b01af49b6bc8dc98f50056def635cfd120756ecc15d40e01c1b94be7e2d3e27327604b115df21e21d53c0800352cb6ffaca654

  • SSDEEP

    6144:k9NTJutCY/5/WvBMOUijERJcpHpO680ClbxrcG0NagSjx7pwco3/NFRYqAHzrGv8:2QtBXwm8J1ClbxraAgSjlo/NHYLiv8

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      3f3c4b0e4a8239cb794fb6ca795b540b5b4fb08bc0786dec687ca5cc4b04f77f.exe

    • Size

      598KB

    • MD5

      dd9e93233b60e1c945fec2e72243f910

    • SHA1

      c7832f94b00d18d8397fe67e9efd96c0b6893122

    • SHA256

      3f3c4b0e4a8239cb794fb6ca795b540b5b4fb08bc0786dec687ca5cc4b04f77f

    • SHA512

      d7fa46b4b82b765f644dbbaf91b01af49b6bc8dc98f50056def635cfd120756ecc15d40e01c1b94be7e2d3e27327604b115df21e21d53c0800352cb6ffaca654

    • SSDEEP

      6144:k9NTJutCY/5/WvBMOUijERJcpHpO680ClbxrcG0NagSjx7pwco3/NFRYqAHzrGv8:2QtBXwm8J1ClbxraAgSjlo/NHYLiv8

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks