General

  • Target

    58bd4aa510d7accfe9f1ecf8f6fd25d0_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240718-x37gtawbra

  • MD5

    58bd4aa510d7accfe9f1ecf8f6fd25d0

  • SHA1

    c005ecc745ea3b0318835ebee3d8450fc26eae30

  • SHA256

    8e393b94cfa476a5fc1919af55ac30da58677cd629e6cbc3330f3f6f8db9a4dd

  • SHA512

    5099f8ad900dbeedd6d136948cf0ec8489ac478496af89de3d17e76860d96938e909124f97a30c976d1b93b1f3c2e77f0b9e9e2b3d6b654de6a41ee9783b93f9

  • SSDEEP

    24576:W46Ameet1UcLL6zyXdBVUBAsL04z4PJZYK+1xtqE/H9B9p:W46A7ekQOz0EWJZJ+93v9B9p

Malware Config

Targets

    • Target

      58bd4aa510d7accfe9f1ecf8f6fd25d0_JaffaCakes118

    • Size

      1.2MB

    • MD5

      58bd4aa510d7accfe9f1ecf8f6fd25d0

    • SHA1

      c005ecc745ea3b0318835ebee3d8450fc26eae30

    • SHA256

      8e393b94cfa476a5fc1919af55ac30da58677cd629e6cbc3330f3f6f8db9a4dd

    • SHA512

      5099f8ad900dbeedd6d136948cf0ec8489ac478496af89de3d17e76860d96938e909124f97a30c976d1b93b1f3c2e77f0b9e9e2b3d6b654de6a41ee9783b93f9

    • SSDEEP

      24576:W46Ameet1UcLL6zyXdBVUBAsL04z4PJZYK+1xtqE/H9B9p:W46A7ekQOz0EWJZJ+93v9B9p

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks