Overview

overview

10

Static

static

3

PO#RFQ-HL51L05....exe

windows10-2004-x64

10

PO#RFQ-HL51L05....exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RFQ-HL51L05...rar.ZA.rar

  • Size

    763KB

  • Sample

    250415-sdjl8swls7

  • MD5

    1cd92a48197c7a820a2ff8a22cf41db5

  • SHA1

    1f1dbda8cda97b9bcad4bc0549bbef595e8f561f

  • SHA256

    ef963f69e02cbc0bdb2b4fd7d152780a5926f4bab8e679d0221bcb260132e191

  • SHA512

    e03d574e2df0e5dcb232ab621ace865e4a1e1688fbb5ae1c4a45caf5bdb42ceeb443ff9f6658db1981bb0f80c68933f9e65ab19832b68f9619cb643f8a2964eb

  • SSDEEP

    12288:rkKNWPNddvbHBZi5PjrV5ydie8J7D9AummSzDZjgGAftB55noSm1gjg2IYe/lC6h:oKEdN+5Pjh5ydgbSnBA0gjg2IYxTAveS

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      PO#RFQ-HL51L05....exe

    • Size

      858KB

    • MD5

      c98f8cb0f627f8d8859acf950b145eab

    • SHA1

      81ffcdc2addbaa505722edd91468c5a561dee781

    • SHA256

      4d934eff240fdf3c222505a546d8fb8c682a3affb70e4a85c635f607a47d8b1a

    • SHA512

      cb01aa4a16bf9c0b682bf7b9e00678cb47ecacf24ffedcfea68cea652584f21e711fa3c7578b09b51eca6eadf962bf25e1457a54d0d3f101f2e4d9681ff0a4aa

    • SSDEEP

      24576:kXOlaVwfNQnzFy1frX0EhHdG+V4ZQB8Gv:kDzo5oEpdGqSQBJ

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks