General

  • Target

    529a8e11723aae1c420d0f0118f3226f_JaffaCakes118

  • Size

    40KB

  • Sample

    240717-mklsaawhpm

  • MD5

    529a8e11723aae1c420d0f0118f3226f

  • SHA1

    5bd99dd5b239cf8fd9f980dbe1a7bbe6a37c788a

  • SHA256

    58e7353251240512b9306bbbcf17c0e9b277c2ae9b2699441dcf2c73aadfd3e1

  • SHA512

    512d28b2dad413c2050e383ed1e18724f4038b6c5d562b57b74463281c34063ef2f5b9a391d3c90869b30c8d9ad881b925edce64a7b818acc7528b933c18bfa5

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJm:JxqjQ+P04wsmJC

Malware Config

Targets

    • Target

      529a8e11723aae1c420d0f0118f3226f_JaffaCakes118

    • Size

      40KB

    • MD5

      529a8e11723aae1c420d0f0118f3226f

    • SHA1

      5bd99dd5b239cf8fd9f980dbe1a7bbe6a37c788a

    • SHA256

      58e7353251240512b9306bbbcf17c0e9b277c2ae9b2699441dcf2c73aadfd3e1

    • SHA512

      512d28b2dad413c2050e383ed1e18724f4038b6c5d562b57b74463281c34063ef2f5b9a391d3c90869b30c8d9ad881b925edce64a7b818acc7528b933c18bfa5

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJm:JxqjQ+P04wsmJC

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks