Overview

overview

10

Static

static

10

4463ff6776...18.exe

windows7-x64

10

4463ff6776...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4463ff6776c9a1b79be6f7a15d4cbc4b_JaffaCakes118

  • Size

    40KB

  • Sample

    241014-1zlmqasfjl

  • MD5

    4463ff6776c9a1b79be6f7a15d4cbc4b

  • SHA1

    79a2ec644ce377da2e97dc47ebd1174debdb9369

  • SHA256

    c338cf50fcfdb9a73a7f427a19f543c30da63d647c9791919c750c14832b2e17

  • SHA512

    f3fd2b5657e4c04d1f1cade63181813097b979e54325497b6e3186852b5721e3cbb38a378086e5bf43ecb30d7b25e929cbf25b469b95a4bfbfd43db6e8d2d318

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJhD:JxqjQ+P04wsmJCW

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      4463ff6776c9a1b79be6f7a15d4cbc4b_JaffaCakes118

    • Size

      40KB

    • MD5

      4463ff6776c9a1b79be6f7a15d4cbc4b

    • SHA1

      79a2ec644ce377da2e97dc47ebd1174debdb9369

    • SHA256

      c338cf50fcfdb9a73a7f427a19f543c30da63d647c9791919c750c14832b2e17

    • SHA512

      f3fd2b5657e4c04d1f1cade63181813097b979e54325497b6e3186852b5721e3cbb38a378086e5bf43ecb30d7b25e929cbf25b469b95a4bfbfd43db6e8d2d318

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJhD:JxqjQ+P04wsmJCW

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks