General

  • Target

    377d04c7d7e15204191942d260a9a436_JaffaCakes118

  • Size

    1.2MB

  • Sample

    241012-adaefs1gmd

  • MD5

    377d04c7d7e15204191942d260a9a436

  • SHA1

    907c470e1049daa4b983d9ed54a1abb47c7119f2

  • SHA256

    97c9519ecd1ce1e47a472a751d0509c8490f3818a98eca5d9af8d8fbfd369520

  • SHA512

    0d34b6650b172fa8c4ba4b6ba9f3c2c163b250ab03873904cbc6ae12b0febc34183d9954e57d66e674e5f6ac280d8264ba44e2a4710132c04e79995ed37ee43f

  • SSDEEP

    24576:5/dJUNrswJACjfQQUE6tl3TjvgPeE62b3dBzZSpU6osBk2xy4QkSRQ:5mrjAD/8BzZgdQ6

Malware Config

Targets

    • Target

      377d04c7d7e15204191942d260a9a436_JaffaCakes118

    • Size

      1.2MB

    • MD5

      377d04c7d7e15204191942d260a9a436

    • SHA1

      907c470e1049daa4b983d9ed54a1abb47c7119f2

    • SHA256

      97c9519ecd1ce1e47a472a751d0509c8490f3818a98eca5d9af8d8fbfd369520

    • SHA512

      0d34b6650b172fa8c4ba4b6ba9f3c2c163b250ab03873904cbc6ae12b0febc34183d9954e57d66e674e5f6ac280d8264ba44e2a4710132c04e79995ed37ee43f

    • SSDEEP

      24576:5/dJUNrswJACjfQQUE6tl3TjvgPeE62b3dBzZSpU6osBk2xy4QkSRQ:5mrjAD/8BzZgdQ6

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks