General
-
Target
0533a02e3cae4a36d65e79089914e3ce_JaffaCakes118
-
Size
5.7MB
-
Sample
240428-pr6r5sgc7s
-
MD5
0533a02e3cae4a36d65e79089914e3ce
-
SHA1
fb1bd6eb516f151c91f18c073339ddb993e64baa
-
SHA256
382186b7b8c931372d24d2a07219ca68e6bce2b968b97912fdb732cf27e5fce7
-
SHA512
23fe76802ca870109b63cf3465c3bcb5b2a2580751caddfb40664a086e80f9722b0443531ee93a77cdd9941be3decdfb7c35a2d6e3db7e346367fdeae7312783
-
SSDEEP
49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok30nwHzsOyCPOEqCN4MBciKOyCPO5YcM1:FlerjesRJ8YQU/ooPOE1NfciZPO55w
Behavioral task
behavioral1
Sample
0533a02e3cae4a36d65e79089914e3ce_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0533a02e3cae4a36d65e79089914e3ce_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
0533a02e3cae4a36d65e79089914e3ce_JaffaCakes118
-
Size
5.7MB
-
MD5
0533a02e3cae4a36d65e79089914e3ce
-
SHA1
fb1bd6eb516f151c91f18c073339ddb993e64baa
-
SHA256
382186b7b8c931372d24d2a07219ca68e6bce2b968b97912fdb732cf27e5fce7
-
SHA512
23fe76802ca870109b63cf3465c3bcb5b2a2580751caddfb40664a086e80f9722b0443531ee93a77cdd9941be3decdfb7c35a2d6e3db7e346367fdeae7312783
-
SSDEEP
49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok30nwHzsOyCPOEqCN4MBciKOyCPO5YcM1:FlerjesRJ8YQU/ooPOE1NfciZPO55w
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-