Overview

overview

10

Static

static

10

2025-04-01...ta.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-01_473b85ff4f65cc3ca8c3b043357298e7_black-basta_hijackloader_neshta

  • Size

    1.1MB

  • Sample

    250401-t5mcwavmt3

  • MD5

    473b85ff4f65cc3ca8c3b043357298e7

  • SHA1

    d51591e9917ad36910c4b69662168cdeb00f540a

  • SHA256

    1dd63dc0ee8892935d12a8bbd83b8a2fbf41a5ae0f9a09a90a7705ea9f6f7313

  • SHA512

    d4f824b57b440082806e7d527748b0e6213db3427328aad934d08f2c00f3a3d249a1fc04c6a9a997f2ba4aab958e169aaeb6b89024c32a0726989b7e2785adce

  • SSDEEP

    12288:KuUWSv0LZ0dkXepg517sB0I5NTBpoEfHfR2o/EoK/b60pJgQfz2fzAgdQ5:KupSMLag1700IAiw1/PJdz+zAgdM

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      2025-04-01_473b85ff4f65cc3ca8c3b043357298e7_black-basta_hijackloader_neshta

    • Size

      1.1MB

    • MD5

      473b85ff4f65cc3ca8c3b043357298e7

    • SHA1

      d51591e9917ad36910c4b69662168cdeb00f540a

    • SHA256

      1dd63dc0ee8892935d12a8bbd83b8a2fbf41a5ae0f9a09a90a7705ea9f6f7313

    • SHA512

      d4f824b57b440082806e7d527748b0e6213db3427328aad934d08f2c00f3a3d249a1fc04c6a9a997f2ba4aab958e169aaeb6b89024c32a0726989b7e2785adce

    • SSDEEP

      12288:KuUWSv0LZ0dkXepg517sB0I5NTBpoEfHfR2o/EoK/b60pJgQfz2fzAgdQ5:KupSMLag1700IAiw1/PJdz+zAgdM

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks