General

  • Target

    53f98b9d48d9401d21dafef21e8a5383_JaffaCakes118

  • Size

    84KB

  • Sample

    240717-vrkgssteqa

  • MD5

    53f98b9d48d9401d21dafef21e8a5383

  • SHA1

    146422bbcafc8d02273c9a5799489cd2a900a7fe

  • SHA256

    23bb568881e91d73453d3d84683c3539b67d5ce6753e68bb1b72a9868811d4a9

  • SHA512

    b99ee4fe3541993642310d0de460609bd03cedb9b45bbe55219e25cf474b4c1a09e7c83e3fea752cbcff229511e43ab302fa919d3fe189b7cfffcf6a60e229a3

  • SSDEEP

    1536:kxqjQ+P04wsZLnDrCrOWOu5gYhaWlnr5YbrF3:Rr8WDrCr0agYhaQrY3

Malware Config

Targets

    • Target

      53f98b9d48d9401d21dafef21e8a5383_JaffaCakes118

    • Size

      84KB

    • MD5

      53f98b9d48d9401d21dafef21e8a5383

    • SHA1

      146422bbcafc8d02273c9a5799489cd2a900a7fe

    • SHA256

      23bb568881e91d73453d3d84683c3539b67d5ce6753e68bb1b72a9868811d4a9

    • SHA512

      b99ee4fe3541993642310d0de460609bd03cedb9b45bbe55219e25cf474b4c1a09e7c83e3fea752cbcff229511e43ab302fa919d3fe189b7cfffcf6a60e229a3

    • SSDEEP

      1536:kxqjQ+P04wsZLnDrCrOWOu5gYhaWlnr5YbrF3:Rr8WDrCr0agYhaQrY3

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks