Overview

overview

10

Static

static

10

776929b118...18.exe

windows7-x64

10

776929b118...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    776929b1182896ad4c4144130c38896f_JaffaCakes118

  • Size

    40KB

  • Sample

    241028-dwct3szcqn

  • MD5

    776929b1182896ad4c4144130c38896f

  • SHA1

    32c836c7aff143951188c43ef42050ca5cf7d71d

  • SHA256

    e0c00e5cdc8a6b5c3e8732b75f07171f9ac8a971b914c1c25c5f95ec6fb4c9b4

  • SHA512

    404d6b30793c37d0348aee601dca7b4012448c0056c3d8463142364975e9e489668d0987d43443a87b33225e74c1158cc59bd0af3ccd7654cecd70374ccde5ae

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJup2f68W4NwMSd:JxqjQ+P04wsmJC4

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      776929b1182896ad4c4144130c38896f_JaffaCakes118

    • Size

      40KB

    • MD5

      776929b1182896ad4c4144130c38896f

    • SHA1

      32c836c7aff143951188c43ef42050ca5cf7d71d

    • SHA256

      e0c00e5cdc8a6b5c3e8732b75f07171f9ac8a971b914c1c25c5f95ec6fb4c9b4

    • SHA512

      404d6b30793c37d0348aee601dca7b4012448c0056c3d8463142364975e9e489668d0987d43443a87b33225e74c1158cc59bd0af3ccd7654cecd70374ccde5ae

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJup2f68W4NwMSd:JxqjQ+P04wsmJC4

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks