neshta | b3c62af1116d55a6e0968a4274b6be108ae62c0c8b23ce66f84b00fcb283a245

General

Target
2026-09-04_05a5da297d9d4907fb99e7032184bfe9_elex_neshta_ransomhub_rhadamanthys_smoke-loader_stealc_stop_tofsee
Size 1.2MB
Sample260905-x755js1dqd
SHA256 b3c62af1116d55a6e0968a4274b6be108ae62c0c8b23ce66f84b00fcb283a245
MD5 05a5da297d9d4907fb99e7032184bfe9
SHA1 0fa563866cf0cab183aa25afc51807761172dd75
SHA512 7345d911e60a171e2657e0a626e03430a833f04d50e284f44402e369baca0ce169d645566951a76a5678a7e73c980c7f37985ca73063fe763e772c6eb0fe5210
SSDEEP 24576:A4iblGuZXi6kgaINVIgSJg2L0q3xM9ulZ+oheDNsNXI0OAl8m:v0hZXiTcNSgWbLXBM0+oKNsdOA/
TLSH
T10545E0203EDFC476D1421130C9B6DAF6A464AD62BF2205EB63943F3AFAB57C04237659
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-09-04_05a5da297d9d4907fb99e7032184bfe9_elex_neshta_ransomhub_rhadamanthys_smoke-loader_stealc_stop_tofsee
- Size 1.2MB
- SHA256 b3c62af1116d55a6e0968a4274b6be108ae62c0c8b23ce66f84b00fcb283a245
- MD5 05a5da297d9d4907fb99e7032184bfe9
- SHA1 0fa563866cf0cab183aa25afc51807761172dd75
- SHA512 7345d911e60a171e2657e0a626e03430a833f04d50e284f44402e369baca0ce169d645566951a76a5678a7e73c980c7f37985ca73063fe763e772c6eb0fe5210
- SSDEEP 24576:A4iblGuZXi6kgaINVIgSJg2L0q3xM9ulZ+oheDNsNXI0OAl8m:v0hZXiTcNSgWbLXBM0+oKNsdOA/
- TLSH
  T10545E0203EDFC476D1421130C9B6DAF6A464AD62BF2205EB63943F3AFAB57C04237659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

adware defense_evasion discovery neshta persistence spyware stealer trojan
- Detect Neshta payload
- Family: Neshta
  Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
  persistence spyware neshta
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral1 behavioral2