Overview

overview

10

Static

static

10

002a214579...18.exe

windows7-x64

10

002a214579...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    002a21457943fd724cd00d5034189ac0_JaffaCakes118

  • Size

    5.4MB

  • Sample

    240425-1wfmasff6y

  • MD5

    002a21457943fd724cd00d5034189ac0

  • SHA1

    523838f91505cf5eeb4e77aa5d3ee5ca711a65a9

  • SHA256

    9f0586dd9eafbd59d469c0aa55622c9216e1d038ad5db6377295ed5eb1ac09c9

  • SHA512

    6cec8d363364d7eaeee6d1dc4ee331ae37e4f14a409afe3a0c78326ce285df92719f40357face3f782f427d83bba2e45273799cd79eced0e948bb16d4301e96c

  • SSDEEP

    49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok3V9sBQ8ZbnDmx91OyCPOYYcM/oGbnQ/7WUT9uA:FlerjesRJ8YQU/V9elTPOY5so4iwIDQy

Score
10/10
darkcometneshtapersistencespywarestealer

Malware Config

Targets

    • Target

      002a21457943fd724cd00d5034189ac0_JaffaCakes118

    • Size

      5.4MB

    • MD5

      002a21457943fd724cd00d5034189ac0

    • SHA1

      523838f91505cf5eeb4e77aa5d3ee5ca711a65a9

    • SHA256

      9f0586dd9eafbd59d469c0aa55622c9216e1d038ad5db6377295ed5eb1ac09c9

    • SHA512

      6cec8d363364d7eaeee6d1dc4ee331ae37e4f14a409afe3a0c78326ce285df92719f40357face3f782f427d83bba2e45273799cd79eced0e948bb16d4301e96c

    • SSDEEP

      49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok3V9sBQ8ZbnDmx91OyCPOYYcM/oGbnQ/7WUT9uA:FlerjesRJ8YQU/V9elTPOY5so4iwIDQy

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks