Overview

overview

10

Static

static

10

691a604cc4...18.exe

windows7-x64

10

691a604cc4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    691a604cc4f325eba51b6aae19a8ce9d_JaffaCakes118

  • Size

    175KB

  • Sample

    241022-f4qr1s1hlp

  • MD5

    691a604cc4f325eba51b6aae19a8ce9d

  • SHA1

    4044fd8afc1754e2bf15f78b20463750b31317f4

  • SHA256

    47422bc51737c0f11e59a9e0e291b274ffef60b96ba2bae40c3aea96472fc69c

  • SHA512

    6d347c4f41e7632d6a6165eaa975e763d9e732c259ae0bc4ec5a4d5880ab47b39dfe9ed96a94a4c15cda1d216f86a860d283bc8fe33fb12744d9457d2e576c14

  • SSDEEP

    3072:sr85Cc1Zxh+1G7xLtQxfsaq0XLIuvtQxfsaq0XLIu1:k9c1Z4G7h6xfLq0XL56xfLq0XL7

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      691a604cc4f325eba51b6aae19a8ce9d_JaffaCakes118

    • Size

      175KB

    • MD5

      691a604cc4f325eba51b6aae19a8ce9d

    • SHA1

      4044fd8afc1754e2bf15f78b20463750b31317f4

    • SHA256

      47422bc51737c0f11e59a9e0e291b274ffef60b96ba2bae40c3aea96472fc69c

    • SHA512

      6d347c4f41e7632d6a6165eaa975e763d9e732c259ae0bc4ec5a4d5880ab47b39dfe9ed96a94a4c15cda1d216f86a860d283bc8fe33fb12744d9457d2e576c14

    • SSDEEP

      3072:sr85Cc1Zxh+1G7xLtQxfsaq0XLIuvtQxfsaq0XLIu1:k9c1Z4G7h6xfLq0XL56xfLq0XL7

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks