General

  • Target

    e631ace4befc9f29086d6a69f728bd4a_JaffaCakes118

  • Size

    70KB

  • Sample

    241212-nrbrbsvmgm

  • MD5

    e631ace4befc9f29086d6a69f728bd4a

  • SHA1

    6b465c5179c3e83510c6579d9b12aec3a121b827

  • SHA256

    dc8316684a1847fbe50f23e6807dd62dc6c80889fd58b2bd64d425163723363d

  • SHA512

    d7710cae3f6f8c12ffc2c4382aa3f595197efc6cd9cf0fafffc155adfce8724203859e6c13ff9aa0e52f984df412e08663a80d47c329592694957054972cfea1

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJyYewP0OQdJpYewP:JxqjQ+P04wsmJCe

Malware Config

Targets

    • Target

      e631ace4befc9f29086d6a69f728bd4a_JaffaCakes118

    • Size

      70KB

    • MD5

      e631ace4befc9f29086d6a69f728bd4a

    • SHA1

      6b465c5179c3e83510c6579d9b12aec3a121b827

    • SHA256

      dc8316684a1847fbe50f23e6807dd62dc6c80889fd58b2bd64d425163723363d

    • SHA512

      d7710cae3f6f8c12ffc2c4382aa3f595197efc6cd9cf0fafffc155adfce8724203859e6c13ff9aa0e52f984df412e08663a80d47c329592694957054972cfea1

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJyYewP0OQdJpYewP:JxqjQ+P04wsmJCe

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks