Overview

overview

10

Static

static

10

RdrService...en.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RdrServicesUpdater2_en.exe

  • Size

    341KB

  • Sample

    250123-rjqr3askgs

  • MD5

    f2e9e1b463596a5d0e486874a902e8c5

  • SHA1

    3d286495ba9be7d069e232cc2a2611184603df16

  • SHA256

    744ee6dab2e97f1d188fd1577a01ddfd125705e32375ab18522ab6c46a1602d6

  • SHA512

    c15b2f1cd2b51a3378a23fa2abb43c4a62d657d541f67352f5496a8b6c33600cb4718960e0951c024e4522aad0bb4b92f4c362133ecfd8a4e3dd219c5de98d5e

  • SSDEEP

    6144:k9ENBO0aUjwGnd06FWTBr/93np65EGT4m:vNBau5WTl/S+m

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      RdrServicesUpdater2_en.exe

    • Size

      341KB

    • MD5

      f2e9e1b463596a5d0e486874a902e8c5

    • SHA1

      3d286495ba9be7d069e232cc2a2611184603df16

    • SHA256

      744ee6dab2e97f1d188fd1577a01ddfd125705e32375ab18522ab6c46a1602d6

    • SHA512

      c15b2f1cd2b51a3378a23fa2abb43c4a62d657d541f67352f5496a8b6c33600cb4718960e0951c024e4522aad0bb4b92f4c362133ecfd8a4e3dd219c5de98d5e

    • SSDEEP

      6144:k9ENBO0aUjwGnd06FWTBr/93np65EGT4m:vNBau5WTl/S+m

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks