Overview

overview

10

Static

static

10

a27f112587...fd.exe

windows7-x64

10

a27f112587...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a27f1125872430327a923045b741d89504b6edc23ecb6b7251480589195f83fd

  • Size

    2.5MB

  • Sample

    250208-dyscjstnfk

  • MD5

    ed8f2ff4aee84215bd907ee9eb0b5dd1

  • SHA1

    8d769cab99d74dda3a29207b9b8666487e3c4146

  • SHA256

    a27f1125872430327a923045b741d89504b6edc23ecb6b7251480589195f83fd

  • SHA512

    840f3a37bfdef37ffbca02741df3df80cb58f5db30407322142bf28582a79621fb4e8b4cb6ab43d4283e8c0620213b23671f253cd509fb33fcac10b77796f46f

  • SSDEEP

    49152:MdrGT9oY0SAQ4+YI1Qb1oWGxblxZa0o857DC:MFGTv1QtGxHZabL

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      a27f1125872430327a923045b741d89504b6edc23ecb6b7251480589195f83fd

    • Size

      2.5MB

    • MD5

      ed8f2ff4aee84215bd907ee9eb0b5dd1

    • SHA1

      8d769cab99d74dda3a29207b9b8666487e3c4146

    • SHA256

      a27f1125872430327a923045b741d89504b6edc23ecb6b7251480589195f83fd

    • SHA512

      840f3a37bfdef37ffbca02741df3df80cb58f5db30407322142bf28582a79621fb4e8b4cb6ab43d4283e8c0620213b23671f253cd509fb33fcac10b77796f46f

    • SSDEEP

      49152:MdrGT9oY0SAQ4+YI1Qb1oWGxblxZa0o857DC:MFGTv1QtGxHZabL

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks