Overview

overview

10

Static

static

10

082d1695ea...18.exe

windows7-x64

10

082d1695ea...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    082d1695ea84ad955099e6d5231bc9b9_JaffaCakes118

  • Size

    391KB

  • Sample

    240620-vxkdzsyflb

  • MD5

    082d1695ea84ad955099e6d5231bc9b9

  • SHA1

    ee21d00b1a974266fad95266207ff18710efffa2

  • SHA256

    a3f4b4c1fff4ccf7724417ce005eb9b444c232a9192451cd11ab21c6be9dcc99

  • SHA512

    157226494c4682e972fd578f07db5f724e6c0f6329b296f641e5ac5fbb3d86bc027954f50f44b58f5d5e1155417e2a61b4e3c5317b81563015d50bacb04c620b

  • SSDEEP

    6144:k9VTHKNoq5uIK3zVtPb1LDNl+ufzgKkNtLIVKKdL+ap:23IsPpLDNd2tLIVKKRp

Score
10/10
neshtapersistencespywarestealer

Malware Config

Targets

    • Target

      082d1695ea84ad955099e6d5231bc9b9_JaffaCakes118

    • Size

      391KB

    • MD5

      082d1695ea84ad955099e6d5231bc9b9

    • SHA1

      ee21d00b1a974266fad95266207ff18710efffa2

    • SHA256

      a3f4b4c1fff4ccf7724417ce005eb9b444c232a9192451cd11ab21c6be9dcc99

    • SHA512

      157226494c4682e972fd578f07db5f724e6c0f6329b296f641e5ac5fbb3d86bc027954f50f44b58f5d5e1155417e2a61b4e3c5317b81563015d50bacb04c620b

    • SSDEEP

      6144:k9VTHKNoq5uIK3zVtPb1LDNl+ufzgKkNtLIVKKdL+ap:23IsPpLDNd2tLIVKKRp

    Score
    10/10
    neshtapersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks