Overview

overview

10

Static

static

10

a494a248fa...18.exe

windows7-x64

10

a494a248fa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a494a248faf135b061d5824636cebbb1_JaffaCakes118

  • Size

    40KB

  • Sample

    241126-2zysqa1kbk

  • MD5

    a494a248faf135b061d5824636cebbb1

  • SHA1

    05cf6d9b72fe6b57a25c03a268e0edef62b80170

  • SHA256

    fc758e04cb095f06af2014066b4d325bfaa7be86f186c4ec4a5bcf6060acb6ba

  • SHA512

    32b041c53307a482f1cb880d31483f35d310df06889218b76d88dbc4944add6583f04bc3798c5f3f41f09e1bfaa9de4e9182c75a561700dc304fa5e5331ee22b

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ3f:JxqjQ+P04wsmJC

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      a494a248faf135b061d5824636cebbb1_JaffaCakes118

    • Size

      40KB

    • MD5

      a494a248faf135b061d5824636cebbb1

    • SHA1

      05cf6d9b72fe6b57a25c03a268e0edef62b80170

    • SHA256

      fc758e04cb095f06af2014066b4d325bfaa7be86f186c4ec4a5bcf6060acb6ba

    • SHA512

      32b041c53307a482f1cb880d31483f35d310df06889218b76d88dbc4944add6583f04bc3798c5f3f41f09e1bfaa9de4e9182c75a561700dc304fa5e5331ee22b

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ3f:JxqjQ+P04wsmJC

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks