Overview

overview

10

Static

static

10

5a431c261a...18.exe

windows7-x64

10

5a431c261a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a431c261a52936fcb11d8c65d6b7838_JaffaCakes118

  • Size

    8.8MB

  • Sample

    241019-b7z3ms1hrr

  • MD5

    5a431c261a52936fcb11d8c65d6b7838

  • SHA1

    3fe7ce03fa0b4608a3808fd218dd4f1963d61aef

  • SHA256

    b62cd2225131c81d38d26c5bf8e6fd600f0c87312d4cc155a489630de166f8ec

  • SHA512

    61f6364e76198ba976f314afbc6e98fdcd199de80bd27583f2fbaa71636f3b02f2acb1defa330d73342dc58de7cc61a1e22779d2a357095242871774bb80166b

  • SSDEEP

    49152:ohPg95YC1yRr5R+jzA66ymAu1Rx48D9d5VGoemckeh7ns3xHzX11w+XYxCjLuWVT:8gXt1yRr8zA6POQVh7n+xb11w+XYxC0

Score
10/10
neshtadiscoverypersistencespyware

Malware Config

Targets

    • Target

      5a431c261a52936fcb11d8c65d6b7838_JaffaCakes118

    • Size

      8.8MB

    • MD5

      5a431c261a52936fcb11d8c65d6b7838

    • SHA1

      3fe7ce03fa0b4608a3808fd218dd4f1963d61aef

    • SHA256

      b62cd2225131c81d38d26c5bf8e6fd600f0c87312d4cc155a489630de166f8ec

    • SHA512

      61f6364e76198ba976f314afbc6e98fdcd199de80bd27583f2fbaa71636f3b02f2acb1defa330d73342dc58de7cc61a1e22779d2a357095242871774bb80166b

    • SSDEEP

      49152:ohPg95YC1yRr5R+jzA66ymAu1Rx48D9d5VGoemckeh7ns3xHzX11w+XYxCjLuWVT:8gXt1yRr8zA6POQVh7n+xb11w+XYxC0

    Score
    10/10
    neshtadiscoverypersistencespyware

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks