Overview

overview

10

Static

static

10

6591e29b76...18.exe

windows7-x64

10

6591e29b76...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6591e29b761deabceee7812896409747_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240723-bm9fksygmc

  • MD5

    6591e29b761deabceee7812896409747

  • SHA1

    293ec78307db2c89770039c4c7782f706912a6f6

  • SHA256

    b47c786eddf654fa4577f02b1ac902064c568f370d5312d011e979ce476c802c

  • SHA512

    173803c7badf4c32fdea16923fa831b1118638b3676f09ea22f6bbd5a6061e64d014b2a1d9d75b47f3784cb68ca604360fa8f9e5f920fd7d3b218e2f89c48599

  • SSDEEP

    24576:Q8BHUKY964CO3EsaeqCe6Nwi3LVBPlnN6OBKW/WP76HQVi1e8K298x:VBHUgunae+qwALVhlN6KZ/GqQVi1eW

Score
10/10
neshtapersistencespywarestealerupx

Malware Config

Targets

    • Target

      6591e29b761deabceee7812896409747_JaffaCakes118

    • Size

      1.4MB

    • MD5

      6591e29b761deabceee7812896409747

    • SHA1

      293ec78307db2c89770039c4c7782f706912a6f6

    • SHA256

      b47c786eddf654fa4577f02b1ac902064c568f370d5312d011e979ce476c802c

    • SHA512

      173803c7badf4c32fdea16923fa831b1118638b3676f09ea22f6bbd5a6061e64d014b2a1d9d75b47f3784cb68ca604360fa8f9e5f920fd7d3b218e2f89c48599

    • SSDEEP

      24576:Q8BHUKY964CO3EsaeqCe6Nwi3LVBPlnN6OBKW/WP76HQVi1e8K298x:VBHUgunae+qwALVhlN6KZ/GqQVi1eW

    Score
    10/10
    neshtapersistencespywarestealerupx

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks