Overview

overview

10

Static

static

10

48e68710d7...5f.exe

windows7-x64

10

48e68710d7...5f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48e68710d7814b6299a0ff1ebd9d3e8fbca2ba604cb450515ec73097fa72005f.exe

  • Size

    434KB

  • Sample

    250124-z872mszrgr

  • MD5

    1b5ce47c2800fed0f3e0872b36103428

  • SHA1

    928d56559133649e1d5500c53cc2d2c39941898f

  • SHA256

    48e68710d7814b6299a0ff1ebd9d3e8fbca2ba604cb450515ec73097fa72005f

  • SHA512

    95b72a3daf56d3003689644799c4ca12f9396e10a853b199403c182fd4bef4dc5b46aa5c51e7c14775bfb029fbc52bb02ef08152bb4ecf1989a828a65da319ca

  • SSDEEP

    12288:4Gj8yn/BZ22ON+8JLxN+uqESXCID0hr/wTQg0k:RxpZ22OE8FxN+umXTCTwTQg0k

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      48e68710d7814b6299a0ff1ebd9d3e8fbca2ba604cb450515ec73097fa72005f.exe

    • Size

      434KB

    • MD5

      1b5ce47c2800fed0f3e0872b36103428

    • SHA1

      928d56559133649e1d5500c53cc2d2c39941898f

    • SHA256

      48e68710d7814b6299a0ff1ebd9d3e8fbca2ba604cb450515ec73097fa72005f

    • SHA512

      95b72a3daf56d3003689644799c4ca12f9396e10a853b199403c182fd4bef4dc5b46aa5c51e7c14775bfb029fbc52bb02ef08152bb4ecf1989a828a65da319ca

    • SSDEEP

      12288:4Gj8yn/BZ22ON+8JLxN+uqESXCID0hr/wTQg0k:RxpZ22OE8FxN+umXTCTwTQg0k

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks