Overview

overview

10

Static

static

10

JaffaCakes...8b.exe

windows7-x64

10

JaffaCakes...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_48e20d5c5b9625fbd6fcbe8ac0f6488b

  • Size

    40KB

  • Sample

    250101-f6t78awmbx

  • MD5

    48e20d5c5b9625fbd6fcbe8ac0f6488b

  • SHA1

    fbbcbeb70f765aeab2318e57440efbf5b124a822

  • SHA256

    da182a2ed0e5dc31b3df585d1a88dfeefa57087811ccfbe917e44f2debb93322

  • SHA512

    8f427b7c16b26a9f0ea3344fe5c3749128b10cc81839c577ff554ce0d732d42ed9845739d8d7ba171eb49663fc9b54daec85e7bd6b2584b5335a217d6b7ca21b

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ3m:JxqjQ+P04wsmJCl

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_48e20d5c5b9625fbd6fcbe8ac0f6488b

    • Size

      40KB

    • MD5

      48e20d5c5b9625fbd6fcbe8ac0f6488b

    • SHA1

      fbbcbeb70f765aeab2318e57440efbf5b124a822

    • SHA256

      da182a2ed0e5dc31b3df585d1a88dfeefa57087811ccfbe917e44f2debb93322

    • SHA512

      8f427b7c16b26a9f0ea3344fe5c3749128b10cc81839c577ff554ce0d732d42ed9845739d8d7ba171eb49663fc9b54daec85e7bd6b2584b5335a217d6b7ca21b

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ3m:JxqjQ+P04wsmJCl

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks