Overview

overview

10

Static

static

10

c1b4ebe882...18.exe

windows7-x64

10

c1b4ebe882...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1b4ebe8824ecb200b86374b9e2aa465_JaffaCakes118

  • Size

    40KB

  • Sample

    241204-kgavhavmem

  • MD5

    c1b4ebe8824ecb200b86374b9e2aa465

  • SHA1

    ca69dd7be8590c3ddd4ab72246555fd6782d03c0

  • SHA256

    f52bc5c67e442f931ea59c4ac2a3f768b6122d4ab6f94991401a559703b5f007

  • SHA512

    d9e1997c0d4609a85b39c85c3e731db9141f083ee5c0b93f53b74feba1e7649bcd573cd821ff875a31967036b844ea6b569861779873adad760dd7bb70160f59

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJh80j:JxqjQ+P04wsmJC280j

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      c1b4ebe8824ecb200b86374b9e2aa465_JaffaCakes118

    • Size

      40KB

    • MD5

      c1b4ebe8824ecb200b86374b9e2aa465

    • SHA1

      ca69dd7be8590c3ddd4ab72246555fd6782d03c0

    • SHA256

      f52bc5c67e442f931ea59c4ac2a3f768b6122d4ab6f94991401a559703b5f007

    • SHA512

      d9e1997c0d4609a85b39c85c3e731db9141f083ee5c0b93f53b74feba1e7649bcd573cd821ff875a31967036b844ea6b569861779873adad760dd7bb70160f59

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJh80j:JxqjQ+P04wsmJC280j

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks