neshta

General

Target

BestNLBrute.zip
Size

7.5MB
Sample

250213-r6j8sszmcy
MD5

8f7b9fd8bc2ac4f7b2a806e5c1fe166c
SHA1

3dd8cf658c17def0377baabfd473037a264c3fd5
SHA256

11179c34425fcd0dcf122f89e74ea745212772280013f570979302acff40266e
SHA512

d7714bc8ae279e17683d555aabb5d6e0174a61d73d57108ff09bf8ab4d093fa0cfea6e552fbde5f84dfe9e51fd9f2abfb708515b1026e0f03d67fc3bd9cb4c05
SSDEEP

196608:fO60xdddo2FMWdVVRj81QcOhvoG0m1cOwoUJGh90lDHB3J:fOl/opWd181QcOhvDbfiGodT

Score

10^/10

Malware Config

Targets

- Target
  
  BestNLBrute/KeyGen crackzerro.exe
- Size
  
  2.5MB
- MD5
  
  e72838eccda2eae29e96b0c572d783c3
- SHA1
  
  60f0944ecbd21cf590445c12ba89a2ae48f27a6a
- SHA256
  
  f824fdc666630ccb179d9086b79783e3ede76e4392a5edfdd20d93b7259ae061
- SHA512
  
  7439902a4f16d29dcc4c749adc40f4541d509e607d915287c6c98f609ef14c4eb99ec507d7e7c853527a6c08628a367b21ae0f066828c2cc8792f2c1a3fa77f8
- SSDEEP
  
  49152:IJdf39XFINkWr5kkYe6TdOYz44rcaMJIsjOO/ry3X0EdNZgJAxGEG8CZaFDG5UN:q9XaH5kheKdX4cjuR6q6XTNTI58ZTN
Score

10^/10

neshta discovery persistence spyware stealer
- Detect Neshta payload
- Neshta
  Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
  persistence spyware neshta
- Neshta family
  neshta
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2
- Target
  
  BestNLBrute/NLBrute.exe
- Size
  
  10.8MB
- MD5
  
  8fd87240d8aafa875f27281c742632a5
- SHA1
  
  bafb115cad58fea63ef2a95e876eddd361165823
- SHA256
  
  78957058f061ee1521f4d764912388d138eab9d57a1f3f6618f6f50f8f2c43e9
- SHA512
  
  272505e017302133306c551a5221aa9e7c322428c84f0cfb368298c3945de58eb1776fa270d30f522b7c12f936680b4936c6f18e4491fe5a35546e575c7684e7
- SSDEEP
  
  196608:Vo77oOvM/lYe06PBSaqTLvgjn8Asdfc9Jsv6tWKFdu9CABMoVuCAsdf:Vo77rGlYe06Z7eYsdE9Jsv6tWKFdu9Ca
Score

8^/10

discovery
- Downloads MZ/PE file
behavioral3 behavioral4