Overview

overview

10

Static

static

10

7022705dbb...18.exe

windows7-x64

10

7022705dbb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7022705dbb319f60da4df9b672e3df13_JaffaCakes118

  • Size

    1.2MB

  • Sample

    240725-spqvpazdjd

  • MD5

    7022705dbb319f60da4df9b672e3df13

  • SHA1

    7c8352b5594f52652146028b5407374b27b69a2b

  • SHA256

    3a7fe495c21df4ab454ba053a81b12096eef40b4be792b5952c4bb26a02b9d7a

  • SHA512

    84665d35c9ae635568d54e0b148e0cd554715f6ed259cf4c70adce32a8c7fcf2cbff584d235788f6da1e4924ce5a9a96a822e3ad7aa135e53106bb0003267e9a

  • SSDEEP

    24576:upSGP3ZEgRhuRKOODz6HY1SC9s6WcREFydry9u6HxyAjh+C:6a+P6HpcTdneN

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      7022705dbb319f60da4df9b672e3df13_JaffaCakes118

    • Size

      1.2MB

    • MD5

      7022705dbb319f60da4df9b672e3df13

    • SHA1

      7c8352b5594f52652146028b5407374b27b69a2b

    • SHA256

      3a7fe495c21df4ab454ba053a81b12096eef40b4be792b5952c4bb26a02b9d7a

    • SHA512

      84665d35c9ae635568d54e0b148e0cd554715f6ed259cf4c70adce32a8c7fcf2cbff584d235788f6da1e4924ce5a9a96a822e3ad7aa135e53106bb0003267e9a

    • SSDEEP

      24576:upSGP3ZEgRhuRKOODz6HY1SC9s6WcREFydry9u6HxyAjh+C:6a+P6HpcTdneN

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks