Overview

overview

10

Static

static

3

feddd1b52f...18.exe

windows7-x64

10

feddd1b52f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    feddd1b52fed48cb6b8b0a5dd84c6b19_JaffaCakes118

  • Size

    40KB

  • Sample

    241219-hkcgdstper

  • MD5

    feddd1b52fed48cb6b8b0a5dd84c6b19

  • SHA1

    06c2b208c8fcacdb5ffd1094f437235afa26c228

  • SHA256

    796add4606100a54e47c8c0c11fc1a1f81f99b08f3c7c62f45bde24f28f0258d

  • SHA512

    ce49beb3cc5d838907cb055ae13f9049588504bd18512de25809abbe1e6783c299db9147404e833b56238952aa697ed8f5df9b90a6031fc66da1bc4c813c6072

  • SSDEEP

    768:myxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJFBkZ:RxqjQ+P04wsmJCYs

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      feddd1b52fed48cb6b8b0a5dd84c6b19_JaffaCakes118

    • Size

      40KB

    • MD5

      feddd1b52fed48cb6b8b0a5dd84c6b19

    • SHA1

      06c2b208c8fcacdb5ffd1094f437235afa26c228

    • SHA256

      796add4606100a54e47c8c0c11fc1a1f81f99b08f3c7c62f45bde24f28f0258d

    • SHA512

      ce49beb3cc5d838907cb055ae13f9049588504bd18512de25809abbe1e6783c299db9147404e833b56238952aa697ed8f5df9b90a6031fc66da1bc4c813c6072

    • SSDEEP

      768:myxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJFBkZ:RxqjQ+P04wsmJCYs

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks