General

  • Target

    621885f120f917c19a1733170f95670a_JaffaCakes118

  • Size

    175KB

  • Sample

    241020-n2h86awfrh

  • MD5

    621885f120f917c19a1733170f95670a

  • SHA1

    93f3916ef751518275000f2a7a40e6ef50d7e5d4

  • SHA256

    e1a55c77be179f347a074df266ac9fda4aed76dc935151f3718fc59491ada670

  • SHA512

    d0b065aa3b44bb91226b132ad4cf4f41415da9c714814cf626849cd5c804d7ceeee07c0a20d84f02242d222f2bb9b23d58d138c4cef8fe518add305fee9d492b

  • SSDEEP

    3072:sr85Cc2ZdF+1suVMtQxfsaq0XLIuqtQxfsaq0XLIu1:k9c2ZAsuVM6xfLq0XL06xfLq0XL7

Malware Config

Targets

    • Target

      621885f120f917c19a1733170f95670a_JaffaCakes118

    • Size

      175KB

    • MD5

      621885f120f917c19a1733170f95670a

    • SHA1

      93f3916ef751518275000f2a7a40e6ef50d7e5d4

    • SHA256

      e1a55c77be179f347a074df266ac9fda4aed76dc935151f3718fc59491ada670

    • SHA512

      d0b065aa3b44bb91226b132ad4cf4f41415da9c714814cf626849cd5c804d7ceeee07c0a20d84f02242d222f2bb9b23d58d138c4cef8fe518add305fee9d492b

    • SSDEEP

      3072:sr85Cc2ZdF+1suVMtQxfsaq0XLIuqtQxfsaq0XLIu1:k9c2ZAsuVM6xfLq0XL06xfLq0XL7

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks