General
-
Target
58bd4aa510d7accfe9f1ecf8f6fd25d0_JaffaCakes118
-
Size
1.2MB
-
Sample
240718-x37gtawbra
-
MD5
58bd4aa510d7accfe9f1ecf8f6fd25d0
-
SHA1
c005ecc745ea3b0318835ebee3d8450fc26eae30
-
SHA256
8e393b94cfa476a5fc1919af55ac30da58677cd629e6cbc3330f3f6f8db9a4dd
-
SHA512
5099f8ad900dbeedd6d136948cf0ec8489ac478496af89de3d17e76860d96938e909124f97a30c976d1b93b1f3c2e77f0b9e9e2b3d6b654de6a41ee9783b93f9
-
SSDEEP
24576:W46Ameet1UcLL6zyXdBVUBAsL04z4PJZYK+1xtqE/H9B9p:W46A7ekQOz0EWJZJ+93v9B9p
Behavioral task
behavioral1
Sample
58bd4aa510d7accfe9f1ecf8f6fd25d0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
58bd4aa510d7accfe9f1ecf8f6fd25d0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
58bd4aa510d7accfe9f1ecf8f6fd25d0_JaffaCakes118
-
Size
1.2MB
-
MD5
58bd4aa510d7accfe9f1ecf8f6fd25d0
-
SHA1
c005ecc745ea3b0318835ebee3d8450fc26eae30
-
SHA256
8e393b94cfa476a5fc1919af55ac30da58677cd629e6cbc3330f3f6f8db9a4dd
-
SHA512
5099f8ad900dbeedd6d136948cf0ec8489ac478496af89de3d17e76860d96938e909124f97a30c976d1b93b1f3c2e77f0b9e9e2b3d6b654de6a41ee9783b93f9
-
SSDEEP
24576:W46Ameet1UcLL6zyXdBVUBAsL04z4PJZYK+1xtqE/H9B9p:W46A7ekQOz0EWJZJ+93v9B9p
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-