Overview

overview

10

Static

static

10

2025-02-09...ry.exe

windows7-x64

10

2025-02-09...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-09_04ec01d0ce041c83beed42e2e9235eb7_neshta_wannacry

  • Size

    5.1MB

  • Sample

    250209-hkp3gszmcm

  • MD5

    04ec01d0ce041c83beed42e2e9235eb7

  • SHA1

    cf21ebbf315b6aafbe51a9e6aa5b097185c4df3e

  • SHA256

    e8a7026b7feffa9e3e55b49e448bb597421540b9e7c1680315b129f9429bc0a9

  • SHA512

    1234d3be5b72e663c2363549067b41b24f589ab151c085427efcd83325cce50b5576d5af17a505cd9ef3708d83c0d5a1a77d8652188ad0ee1174df94b43854cf

  • SSDEEP

    49152:nnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9O:nDqPoBhz1aRxcSUDk36SAEdhvxWa9O

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      2025-02-09_04ec01d0ce041c83beed42e2e9235eb7_neshta_wannacry

    • Size

      5.1MB

    • MD5

      04ec01d0ce041c83beed42e2e9235eb7

    • SHA1

      cf21ebbf315b6aafbe51a9e6aa5b097185c4df3e

    • SHA256

      e8a7026b7feffa9e3e55b49e448bb597421540b9e7c1680315b129f9429bc0a9

    • SHA512

      1234d3be5b72e663c2363549067b41b24f589ab151c085427efcd83325cce50b5576d5af17a505cd9ef3708d83c0d5a1a77d8652188ad0ee1174df94b43854cf

    • SSDEEP

      49152:nnAQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAARdhnvxJM0H9O:nDqPoBhz1aRxcSUDk36SAEdhvxWa9O

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks