Overview

overview

10

Static

static

10

659dd8d6e5...42.exe

windows7-x64

10

659dd8d6e5...42.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    659dd8d6e5e2d41f1f4ed7ee402b955c89b63d7dc9baf3256f39a5f347b92742.exe

  • Size

    146KB

  • Sample

    250202-r1xxpsxrhl

  • MD5

    6ffcddf1082290570947d931a1b3f1f3

  • SHA1

    09282dbfb6ba79e79721b7fe90db9c1c172ae9d4

  • SHA256

    659dd8d6e5e2d41f1f4ed7ee402b955c89b63d7dc9baf3256f39a5f347b92742

  • SHA512

    a9bafa22d487f1718c6482f513affac02e16a0507609d38cbf5e92847404b741cc56658d3d27de2f87d2bd6f9b584ef650e4968808974890454b0d0d22c10ed0

  • SSDEEP

    3072:sr85CkkbAYn2GgYlBYN2fHYTo+1lt8wDSRUTp:k9xbAMpgY3gTR8DRUTp

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      659dd8d6e5e2d41f1f4ed7ee402b955c89b63d7dc9baf3256f39a5f347b92742.exe

    • Size

      146KB

    • MD5

      6ffcddf1082290570947d931a1b3f1f3

    • SHA1

      09282dbfb6ba79e79721b7fe90db9c1c172ae9d4

    • SHA256

      659dd8d6e5e2d41f1f4ed7ee402b955c89b63d7dc9baf3256f39a5f347b92742

    • SHA512

      a9bafa22d487f1718c6482f513affac02e16a0507609d38cbf5e92847404b741cc56658d3d27de2f87d2bd6f9b584ef650e4968808974890454b0d0d22c10ed0

    • SSDEEP

      3072:sr85CkkbAYn2GgYlBYN2fHYTo+1lt8wDSRUTp:k9xbAMpgY3gTR8DRUTp

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks