Overview

overview

10

Static

static

10

JaffaCakes...80.exe

windows7-x64

10

JaffaCakes...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6685ba47cc36cf20888e418a81611180

  • Size

    40KB

  • Sample

    250102-t31gqa1mcr

  • MD5

    6685ba47cc36cf20888e418a81611180

  • SHA1

    fdb246da719df001982969839b41e7ee342803e4

  • SHA256

    5e3290a933cda5ee6566b4b3edda9f5035c9d4260ad4e0bc3a5e480f2243ea84

  • SHA512

    c7a7e57e95936feaad8d10c06a5c7c72190b07ef98396e6a8b34aca00b618482438b3801a38f23d867e2d5515046475fb046e3eaefa29b1e41caaa4870af232b

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJEji:JxqjQ+P04wsmJC1ji

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_6685ba47cc36cf20888e418a81611180

    • Size

      40KB

    • MD5

      6685ba47cc36cf20888e418a81611180

    • SHA1

      fdb246da719df001982969839b41e7ee342803e4

    • SHA256

      5e3290a933cda5ee6566b4b3edda9f5035c9d4260ad4e0bc3a5e480f2243ea84

    • SHA512

      c7a7e57e95936feaad8d10c06a5c7c72190b07ef98396e6a8b34aca00b618482438b3801a38f23d867e2d5515046475fb046e3eaefa29b1e41caaa4870af232b

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJEji:JxqjQ+P04wsmJC1ji

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks