Overview

overview

10

Static

static

10

2025-03-29...ta.exe

windows7-x64

10

2025-03-29...ta.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-29_bcbce10ac67b2b70303a92e98d123ee4_black-basta_neshta

  • Size

    2.7MB

  • Sample

    250329-v18wrawvhy

  • MD5

    bcbce10ac67b2b70303a92e98d123ee4

  • SHA1

    9214c28a404669155ac60bc8d92170774235abe9

  • SHA256

    e152291951c6ed8528ddc98ab51d8d96c03c3a72638aabe9b1c05ad1fac2ad1d

  • SHA512

    2a8d46703a72f63d452acf144475bb2c0fdb06b7294fc89c816792a6f5f68ef973ed2f44cd4168b4bd863f203ecc85ffcfd0724bbc580c6f95eb1f5fac453f9b

  • SSDEEP

    49152:NTsHigyN0MHrNNtb9vGs9eXp2snhhitWErpvtcLXQawjZ:CgGmjt+h0pvhaS

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      2025-03-29_bcbce10ac67b2b70303a92e98d123ee4_black-basta_neshta

    • Size

      2.7MB

    • MD5

      bcbce10ac67b2b70303a92e98d123ee4

    • SHA1

      9214c28a404669155ac60bc8d92170774235abe9

    • SHA256

      e152291951c6ed8528ddc98ab51d8d96c03c3a72638aabe9b1c05ad1fac2ad1d

    • SHA512

      2a8d46703a72f63d452acf144475bb2c0fdb06b7294fc89c816792a6f5f68ef973ed2f44cd4168b4bd863f203ecc85ffcfd0724bbc580c6f95eb1f5fac453f9b

    • SSDEEP

      49152:NTsHigyN0MHrNNtb9vGs9eXp2snhhitWErpvtcLXQawjZ:CgGmjt+h0pvhaS

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks