General
-
Target
621885f120f917c19a1733170f95670a_JaffaCakes118
-
Size
175KB
-
Sample
241020-n2h86awfrh
-
MD5
621885f120f917c19a1733170f95670a
-
SHA1
93f3916ef751518275000f2a7a40e6ef50d7e5d4
-
SHA256
e1a55c77be179f347a074df266ac9fda4aed76dc935151f3718fc59491ada670
-
SHA512
d0b065aa3b44bb91226b132ad4cf4f41415da9c714814cf626849cd5c804d7ceeee07c0a20d84f02242d222f2bb9b23d58d138c4cef8fe518add305fee9d492b
-
SSDEEP
3072:sr85Cc2ZdF+1suVMtQxfsaq0XLIuqtQxfsaq0XLIu1:k9c2ZAsuVM6xfLq0XL06xfLq0XL7
Behavioral task
behavioral1
Sample
621885f120f917c19a1733170f95670a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
621885f120f917c19a1733170f95670a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
621885f120f917c19a1733170f95670a_JaffaCakes118
-
Size
175KB
-
MD5
621885f120f917c19a1733170f95670a
-
SHA1
93f3916ef751518275000f2a7a40e6ef50d7e5d4
-
SHA256
e1a55c77be179f347a074df266ac9fda4aed76dc935151f3718fc59491ada670
-
SHA512
d0b065aa3b44bb91226b132ad4cf4f41415da9c714814cf626849cd5c804d7ceeee07c0a20d84f02242d222f2bb9b23d58d138c4cef8fe518add305fee9d492b
-
SSDEEP
3072:sr85Cc2ZdF+1suVMtQxfsaq0XLIuqtQxfsaq0XLIu1:k9c2ZAsuVM6xfLq0XL06xfLq0XL7
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-