General

  • Target

    5d26221da03d076044fc49b11487258c_JaffaCakes118

  • Size

    141KB

  • Sample

    240719-w5m1hstgmq

  • MD5

    5d26221da03d076044fc49b11487258c

  • SHA1

    bf9deb7f4a91862dfd3b620d96b53a27ce3366b5

  • SHA256

    d40543b0551865fff85dbe71ecf3ded471a0a5262f771718fbc799d343898cb0

  • SHA512

    23788c641b18c2bab7233f3f6b6fe9090b021605b20f24afefa70b5300e2eee48df43f49d118fea38d9d0eb4b2dfa98aab0768cbd11bfa51a94c600ca1c04ec9

  • SSDEEP

    1536:yxqjQ+P04wsZLnDrCWpVDKHL3qs+Ip1KDoKKHL3qs+Ip1KDo/:zr8WDrC7L3HPqovL3HPqo/

Malware Config

Targets

    • Target

      5d26221da03d076044fc49b11487258c_JaffaCakes118

    • Size

      141KB

    • MD5

      5d26221da03d076044fc49b11487258c

    • SHA1

      bf9deb7f4a91862dfd3b620d96b53a27ce3366b5

    • SHA256

      d40543b0551865fff85dbe71ecf3ded471a0a5262f771718fbc799d343898cb0

    • SHA512

      23788c641b18c2bab7233f3f6b6fe9090b021605b20f24afefa70b5300e2eee48df43f49d118fea38d9d0eb4b2dfa98aab0768cbd11bfa51a94c600ca1c04ec9

    • SSDEEP

      1536:yxqjQ+P04wsZLnDrCWpVDKHL3qs+Ip1KDoKKHL3qs+Ip1KDo/:zr8WDrC7L3HPqovL3HPqo/

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks