General

  • Target

    076e06ce83a66732aea04d3e1817db3c_JaffaCakes118

  • Size

    5.3MB

  • Sample

    240429-mdqsnagc43

  • MD5

    076e06ce83a66732aea04d3e1817db3c

  • SHA1

    d23508ff3d8af9fbfbc07234d5f50dfb4241dab1

  • SHA256

    be8b69007657b5861d958e1156773f63d6ceeb115b83b24e74f9422c82a5308d

  • SHA512

    f611e7096d6f2e5ed874c2941be7eba261631323dd488787e46c85fa1d051060b610762e8c6ca4c347fd5650e9047166c401d81fbacf3118eef015de11861168

  • SSDEEP

    49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok3l1hnW4F/yOyCPOEOyCPOxZKhPYSP:FlerjesRJ8YQU/l1hzF/xPOjPOfKhJ

Malware Config

Targets

    • Target

      076e06ce83a66732aea04d3e1817db3c_JaffaCakes118

    • Size

      5.3MB

    • MD5

      076e06ce83a66732aea04d3e1817db3c

    • SHA1

      d23508ff3d8af9fbfbc07234d5f50dfb4241dab1

    • SHA256

      be8b69007657b5861d958e1156773f63d6ceeb115b83b24e74f9422c82a5308d

    • SHA512

      f611e7096d6f2e5ed874c2941be7eba261631323dd488787e46c85fa1d051060b610762e8c6ca4c347fd5650e9047166c401d81fbacf3118eef015de11861168

    • SSDEEP

      49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok3l1hnW4F/yOyCPOEOyCPOxZKhPYSP:FlerjesRJ8YQU/l1hzF/xPOjPOfKhJ

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks