General
-
Target
076e06ce83a66732aea04d3e1817db3c_JaffaCakes118
-
Size
5.3MB
-
Sample
240429-mdqsnagc43
-
MD5
076e06ce83a66732aea04d3e1817db3c
-
SHA1
d23508ff3d8af9fbfbc07234d5f50dfb4241dab1
-
SHA256
be8b69007657b5861d958e1156773f63d6ceeb115b83b24e74f9422c82a5308d
-
SHA512
f611e7096d6f2e5ed874c2941be7eba261631323dd488787e46c85fa1d051060b610762e8c6ca4c347fd5650e9047166c401d81fbacf3118eef015de11861168
-
SSDEEP
49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok3l1hnW4F/yOyCPOEOyCPOxZKhPYSP:FlerjesRJ8YQU/l1hzF/xPOjPOfKhJ
Behavioral task
behavioral1
Sample
076e06ce83a66732aea04d3e1817db3c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
076e06ce83a66732aea04d3e1817db3c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
076e06ce83a66732aea04d3e1817db3c_JaffaCakes118
-
Size
5.3MB
-
MD5
076e06ce83a66732aea04d3e1817db3c
-
SHA1
d23508ff3d8af9fbfbc07234d5f50dfb4241dab1
-
SHA256
be8b69007657b5861d958e1156773f63d6ceeb115b83b24e74f9422c82a5308d
-
SHA512
f611e7096d6f2e5ed874c2941be7eba261631323dd488787e46c85fa1d051060b610762e8c6ca4c347fd5650e9047166c401d81fbacf3118eef015de11861168
-
SSDEEP
49152:Fl/ijN5j2Xsl3RJ3LHobUQDgok3l1hnW4F/yOyCPOEOyCPOxZKhPYSP:FlerjesRJ8YQU/l1hzF/xPOjPOfKhJ
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
-