Overview

overview

10

Static

static

10

d9f7fafbd1...18.exe

windows7-x64

10

d9f7fafbd1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9f7fafbd1868310d5605450c5619ccf_JaffaCakes118

  • Size

    202KB

  • Sample

    241209-rbf8navlhj

  • MD5

    d9f7fafbd1868310d5605450c5619ccf

  • SHA1

    a85e13a0601b84cae5296ef8445703f7e989417b

  • SHA256

    c52ddf7b9353cb5d2d290e05464174c280c666c3361fbdc2742f00a0802bff0f

  • SHA512

    1e764edd7d322b3483559992f27cdf1dc7286537f9f43566ebdf1c6ea306037c674e82f679f7cf7c0f330f9f84eb7c4c1a9b74d2715fc422fb4911872ebb7be4

  • SSDEEP

    3072:sr85C1at3ozsL4WMKjqNqJxf5PppkQIJINw7pkQIJINw7:k9tQL4WMKjYqJxxPpp+IN6p+INq

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      d9f7fafbd1868310d5605450c5619ccf_JaffaCakes118

    • Size

      202KB

    • MD5

      d9f7fafbd1868310d5605450c5619ccf

    • SHA1

      a85e13a0601b84cae5296ef8445703f7e989417b

    • SHA256

      c52ddf7b9353cb5d2d290e05464174c280c666c3361fbdc2742f00a0802bff0f

    • SHA512

      1e764edd7d322b3483559992f27cdf1dc7286537f9f43566ebdf1c6ea306037c674e82f679f7cf7c0f330f9f84eb7c4c1a9b74d2715fc422fb4911872ebb7be4

    • SSDEEP

      3072:sr85C1at3ozsL4WMKjqNqJxf5PppkQIJINw7pkQIJINw7:k9tQL4WMKjYqJxxPpp+IN6p+INq

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks