Overview

overview

10

Static

static

10

34b88b4740...18.exe

windows7-x64

10

34b88b4740...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34b88b474010f6f1372a5b7aecb15afe_JaffaCakes118

  • Size

    989KB

  • Sample

    241011-pc9v9awgnp

  • MD5

    34b88b474010f6f1372a5b7aecb15afe

  • SHA1

    4c1aff890b37741a282e97e44b0368d6ee4dff0a

  • SHA256

    b36db367457b9f45237ec00707f395bb835e136515eb298fb1a32dff4c9abae2

  • SHA512

    edb8ba43ef17296ca84af19fde5805b4267d63acb86a8610ea66f2d9d31e06ac97f1dc980a4c6f099edf0d2030796a28ff59d07945b2696a57af6ef90f9a9ec7

  • SSDEEP

    24576:ePhL7ItGYpa4YB/4HGGj4ETCQix56S+uUdDXPedDXPx:+YKAHH2n6l6

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      34b88b474010f6f1372a5b7aecb15afe_JaffaCakes118

    • Size

      989KB

    • MD5

      34b88b474010f6f1372a5b7aecb15afe

    • SHA1

      4c1aff890b37741a282e97e44b0368d6ee4dff0a

    • SHA256

      b36db367457b9f45237ec00707f395bb835e136515eb298fb1a32dff4c9abae2

    • SHA512

      edb8ba43ef17296ca84af19fde5805b4267d63acb86a8610ea66f2d9d31e06ac97f1dc980a4c6f099edf0d2030796a28ff59d07945b2696a57af6ef90f9a9ec7

    • SSDEEP

      24576:ePhL7ItGYpa4YB/4HGGj4ETCQix56S+uUdDXPedDXPx:+YKAHH2n6l6

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks