Overview

overview

10

Static

static

10

2025-04-15...ta.exe

windows10-2004-x64

10

2025-04-15...ta.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-15_168802c1c290307aba75fb52a3d7299d_black-basta_elex_neshta

  • Size

    1.4MB

  • Sample

    250415-qwm19svls9

  • MD5

    168802c1c290307aba75fb52a3d7299d

  • SHA1

    5bcce87c8e500712f857dddcbc7edd8a99965ea4

  • SHA256

    1af09e1403899e69a5dc93d5fb079d4699fb1e61cba4487d9bf3551034e7ca0a

  • SHA512

    4ee291f03a2f0a2004a3d26e9d1760bec794cf25b42d3720317cc02b0b7ec93f70a88326035794eeaacd4b4797ef9851a90c899b43267814d379ce1303eb74be

  • SSDEEP

    24576:vhxrr2tK7/K485PJ56OS2UDeak5yuBCjTKnOFxWrH5Ei3y:vh8E/K4QmOSTeak5yuBYunOFqH5U

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      2025-04-15_168802c1c290307aba75fb52a3d7299d_black-basta_elex_neshta

    • Size

      1.4MB

    • MD5

      168802c1c290307aba75fb52a3d7299d

    • SHA1

      5bcce87c8e500712f857dddcbc7edd8a99965ea4

    • SHA256

      1af09e1403899e69a5dc93d5fb079d4699fb1e61cba4487d9bf3551034e7ca0a

    • SHA512

      4ee291f03a2f0a2004a3d26e9d1760bec794cf25b42d3720317cc02b0b7ec93f70a88326035794eeaacd4b4797ef9851a90c899b43267814d379ce1303eb74be

    • SSDEEP

      24576:vhxrr2tK7/K485PJ56OS2UDeak5yuBCjTKnOFxWrH5Ei3y:vh8E/K4QmOSTeak5yuBYunOFqH5U

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks