Overview

overview

10

Static

static

10

98a7b7e9b9...91.exe

windows7-x64

10

98a7b7e9b9...91.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98a7b7e9b99b825ceebb555831c64edab465fe94dcdd603248d37cea89e1f391

  • Size

    90KB

  • Sample

    250123-fck3fssrby

  • MD5

    a987b27b5bd16c9dbd07899bb82e5e3b

  • SHA1

    8de5e1d1b0392a92c9f19843dfd72683ad5c76f7

  • SHA256

    98a7b7e9b99b825ceebb555831c64edab465fe94dcdd603248d37cea89e1f391

  • SHA512

    605d0a21ce659322a8a029916afb55a886f55cf5e6691507477190195cd8a5a63cf2d1b7d09dbcbbd9530ba10c413d2fd1a26ef910906b273bee01bc6c9891e9

  • SSDEEP

    1536:JxqjQ+P04wsmJCqu2OSnlZoWty/9ih7rHgIpVOi7WcZZZBomGub5wc68J:sr85Cqu2OS7ou+KHlpVOiic7iub5wbO

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      98a7b7e9b99b825ceebb555831c64edab465fe94dcdd603248d37cea89e1f391

    • Size

      90KB

    • MD5

      a987b27b5bd16c9dbd07899bb82e5e3b

    • SHA1

      8de5e1d1b0392a92c9f19843dfd72683ad5c76f7

    • SHA256

      98a7b7e9b99b825ceebb555831c64edab465fe94dcdd603248d37cea89e1f391

    • SHA512

      605d0a21ce659322a8a029916afb55a886f55cf5e6691507477190195cd8a5a63cf2d1b7d09dbcbbd9530ba10c413d2fd1a26ef910906b273bee01bc6c9891e9

    • SSDEEP

      1536:JxqjQ+P04wsmJCqu2OSnlZoWty/9ih7rHgIpVOi7WcZZZBomGub5wc68J:sr85Cqu2OS7ou+KHlpVOiic7iub5wbO

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks