Overview

overview

10

Static

static

10

2025-04-15...ta.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-15_bf0d2cb47a218caf0a5299944be62c17_black-basta_elex_neshta

  • Size

    7.4MB

  • Sample

    250415-ernapa1zf1

  • MD5

    bf0d2cb47a218caf0a5299944be62c17

  • SHA1

    80af3cb9f7449b42614c95742e59a59bce8b2f8d

  • SHA256

    6a7edb32ef8f95313685dd4d046bd3ddabf086d4755c87e30df892d556a0a549

  • SHA512

    9f448c9b03d70b8f7a5a920f8a34e630e69a83e55c081b00b4dcc1620b99b3a64707ab3565c4ad968fe2d056cef4e650de8b2ee9d9965a68b9fc4c54fd2b2e89

  • SSDEEP

    98304:AotKEyDyaM5p+Wn4xTJkKDWbjf4Lv2ogKRlMOQSQ:RtKEyDyaVTgjWsMrvQ

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      2025-04-15_bf0d2cb47a218caf0a5299944be62c17_black-basta_elex_neshta

    • Size

      7.4MB

    • MD5

      bf0d2cb47a218caf0a5299944be62c17

    • SHA1

      80af3cb9f7449b42614c95742e59a59bce8b2f8d

    • SHA256

      6a7edb32ef8f95313685dd4d046bd3ddabf086d4755c87e30df892d556a0a549

    • SHA512

      9f448c9b03d70b8f7a5a920f8a34e630e69a83e55c081b00b4dcc1620b99b3a64707ab3565c4ad968fe2d056cef4e650de8b2ee9d9965a68b9fc4c54fd2b2e89

    • SSDEEP

      98304:AotKEyDyaM5p+Wn4xTJkKDWbjf4Lv2ogKRlMOQSQ:RtKEyDyaVTgjWsMrvQ

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks