General
-
Target
JaffaCakes118_6a672f3949c9efdcaa0b4601cfacbb90
-
Size
1.4MB
-
Sample
250103-frc1dstkgj
-
MD5
6a672f3949c9efdcaa0b4601cfacbb90
-
SHA1
9070ad562c392da29682049a48728e9b7370c4ac
-
SHA256
d8d28dc4b260ad3e163f383d39ad458d324c122e3876a44d83f4852d3644c3d9
-
SHA512
7b4708694c6007f870c40a85f63c49050610aadbdad2a1a91b197e2812fb759e9ef93bb26c819e1aad9ac020390f981d5dbc00973de2d6ce15b3d966cab05059
-
SSDEEP
24576:fbCGRUXBwnyGx2nHEWmDxrmWAtL6hMT9Q2lFT9L87OpSdeT6z2R:l8EgnkFy7NlTH5L87OpSdeT6zc
Behavioral task
behavioral1
Sample
JaffaCakes118_6a672f3949c9efdcaa0b4601cfacbb90.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
JaffaCakes118_6a672f3949c9efdcaa0b4601cfacbb90.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
JaffaCakes118_6a672f3949c9efdcaa0b4601cfacbb90
-
Size
1.4MB
-
MD5
6a672f3949c9efdcaa0b4601cfacbb90
-
SHA1
9070ad562c392da29682049a48728e9b7370c4ac
-
SHA256
d8d28dc4b260ad3e163f383d39ad458d324c122e3876a44d83f4852d3644c3d9
-
SHA512
7b4708694c6007f870c40a85f63c49050610aadbdad2a1a91b197e2812fb759e9ef93bb26c819e1aad9ac020390f981d5dbc00973de2d6ce15b3d966cab05059
-
SSDEEP
24576:fbCGRUXBwnyGx2nHEWmDxrmWAtL6hMT9Q2lFT9L87OpSdeT6z2R:l8EgnkFy7NlTH5L87OpSdeT6zc
Score10/10-
Detect Neshta payload
-
Neshta
Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.
-
Neshta family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-