Overview

overview

10

Static

static

10

JaffaCakes...e0.exe

windows7-x64

10

JaffaCakes...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_772ea8afc0070657f5de28c073544fe0

  • Size

    86KB

  • Sample

    250104-dcrh5axmfx

  • MD5

    772ea8afc0070657f5de28c073544fe0

  • SHA1

    83a7a7bf7274db21ca6af069c5cdbddb69fb02e4

  • SHA256

    0f52b4cd6b96a647dcc301387f409cb3b6807c539a8fad69f6479163fab7101c

  • SHA512

    7a00e89ec7dc1f1f8aa8e62533bb1111f2f7904306fd0c200fd2001c15f526315f1d3bc7f5c41fa390d61c3e44648a6c5d3b687d13888cba03951f4a8c5ca3df

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJXOQdJ:JxqjQ+P04wsmJCZ

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_772ea8afc0070657f5de28c073544fe0

    • Size

      86KB

    • MD5

      772ea8afc0070657f5de28c073544fe0

    • SHA1

      83a7a7bf7274db21ca6af069c5cdbddb69fb02e4

    • SHA256

      0f52b4cd6b96a647dcc301387f409cb3b6807c539a8fad69f6479163fab7101c

    • SHA512

      7a00e89ec7dc1f1f8aa8e62533bb1111f2f7904306fd0c200fd2001c15f526315f1d3bc7f5c41fa390d61c3e44648a6c5d3b687d13888cba03951f4a8c5ca3df

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJXOQdJ:JxqjQ+P04wsmJCZ

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks