Overview

overview

10

Static

static

10

JaffaCakes...80.exe

windows7-x64

10

JaffaCakes...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_69a89c5f4ec0b16eb419f570f690ec80

  • Size

    40KB

  • Sample

    250103-cw3vtsvraw

  • MD5

    69a89c5f4ec0b16eb419f570f690ec80

  • SHA1

    f3e9d225d58f68ff153d9d6286501419951a5b3c

  • SHA256

    382f501a6f4cbdf22279026fd25a1de35c0ede3ae459254fbfcaaea71061ce2c

  • SHA512

    50169dd5512095af9fe9d9c92decaba854f1aebf4c97261a3c2ed0ecf14b2d7a5b067bc2758b24691ba2dd4f15468a5167c5a02430b510cf4f1583eecfd4dd23

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_69a89c5f4ec0b16eb419f570f690ec80

    • Size

      40KB

    • MD5

      69a89c5f4ec0b16eb419f570f690ec80

    • SHA1

      f3e9d225d58f68ff153d9d6286501419951a5b3c

    • SHA256

      382f501a6f4cbdf22279026fd25a1de35c0ede3ae459254fbfcaaea71061ce2c

    • SHA512

      50169dd5512095af9fe9d9c92decaba854f1aebf4c97261a3c2ed0ecf14b2d7a5b067bc2758b24691ba2dd4f15468a5167c5a02430b510cf4f1583eecfd4dd23

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks