General

  • Target

    JaffaCakes118_6a672f3949c9efdcaa0b4601cfacbb90

  • Size

    1.4MB

  • Sample

    250103-frc1dstkgj

  • MD5

    6a672f3949c9efdcaa0b4601cfacbb90

  • SHA1

    9070ad562c392da29682049a48728e9b7370c4ac

  • SHA256

    d8d28dc4b260ad3e163f383d39ad458d324c122e3876a44d83f4852d3644c3d9

  • SHA512

    7b4708694c6007f870c40a85f63c49050610aadbdad2a1a91b197e2812fb759e9ef93bb26c819e1aad9ac020390f981d5dbc00973de2d6ce15b3d966cab05059

  • SSDEEP

    24576:fbCGRUXBwnyGx2nHEWmDxrmWAtL6hMT9Q2lFT9L87OpSdeT6z2R:l8EgnkFy7NlTH5L87OpSdeT6zc

Malware Config

Targets

    • Target

      JaffaCakes118_6a672f3949c9efdcaa0b4601cfacbb90

    • Size

      1.4MB

    • MD5

      6a672f3949c9efdcaa0b4601cfacbb90

    • SHA1

      9070ad562c392da29682049a48728e9b7370c4ac

    • SHA256

      d8d28dc4b260ad3e163f383d39ad458d324c122e3876a44d83f4852d3644c3d9

    • SHA512

      7b4708694c6007f870c40a85f63c49050610aadbdad2a1a91b197e2812fb759e9ef93bb26c819e1aad9ac020390f981d5dbc00973de2d6ce15b3d966cab05059

    • SSDEEP

      24576:fbCGRUXBwnyGx2nHEWmDxrmWAtL6hMT9Q2lFT9L87OpSdeT6z2R:l8EgnkFy7NlTH5L87OpSdeT6zc

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks