Overview

overview

10

Static

static

10

3ab3f573be...24.exe

windows7-x64

10

3ab3f573be...24.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ab3f573be1e42ef331ca04d2c982b86a939e9931e2f8331f42c2d40e158e824.exe

  • Size

    2.1MB

  • Sample

    250123-kkw7xatjek

  • MD5

    58a352b7b33dbc63b1859ae358da8cdd

  • SHA1

    0d5608486e8c13c9a364b2a4376c8e494cd78385

  • SHA256

    3ab3f573be1e42ef331ca04d2c982b86a939e9931e2f8331f42c2d40e158e824

  • SHA512

    ad754277f62ae880cac2662aeb828a4395b787dcdc373d9c2b823967ea3bbcb3c5f6dd0d23f3993d67248c6b63014b2d9ffcbfc208ef5b6b413a4fa0a66b1ab8

  • SSDEEP

    49152:aNyqOUXEpp970Se04Lp3P3c7Y66oXZvbho9n0/wrXr:TDUXEppiS5413fcnHbho9n0or7

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      3ab3f573be1e42ef331ca04d2c982b86a939e9931e2f8331f42c2d40e158e824.exe

    • Size

      2.1MB

    • MD5

      58a352b7b33dbc63b1859ae358da8cdd

    • SHA1

      0d5608486e8c13c9a364b2a4376c8e494cd78385

    • SHA256

      3ab3f573be1e42ef331ca04d2c982b86a939e9931e2f8331f42c2d40e158e824

    • SHA512

      ad754277f62ae880cac2662aeb828a4395b787dcdc373d9c2b823967ea3bbcb3c5f6dd0d23f3993d67248c6b63014b2d9ffcbfc208ef5b6b413a4fa0a66b1ab8

    • SSDEEP

      49152:aNyqOUXEpp970Se04Lp3P3c7Y66oXZvbho9n0/wrXr:TDUXEppiS5413fcnHbho9n0or7

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks