Overview

overview

10

Static

static

8fdf603293...e1.exe

windows7_x64

7

8fdf603293...e1.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    8fdf6032932fa1a0c9b0fd342ee8bee1
  • Size 1.1MB
  • Sample210923-k3bc6aeac8
  • SHA256 ec0627ef1feef5903f5771bdb6df060a295af132e90ed023f2e1ad14d5ffb40b
  • MD5 SHA1 SHA512
Score
10/10
neshtapersistencespyware

Malware Config

Targets

    • Target
      8fdf6032932fa1a0c9b0fd342ee8bee1
    • Size 1.1MB
    • SHA256 ec0627ef1feef5903f5771bdb6df060a295af132e90ed023f2e1ad14d5ffb40b
    • MD5 SHA1 SHA512
    Score
    10/10
    neshtapersistencespyware

    • Detect Neshta Payload

    • Modifies system executable filetype association

      persistence

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks