Overview

overview

10

Static

static

10

JaffaCakes...54.exe

windows7-x64

10

JaffaCakes...54.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_79c039e70cf24730e17a965cc61ece54

  • Size

    133KB

  • Sample

    250104-py547askgq

  • MD5

    79c039e70cf24730e17a965cc61ece54

  • SHA1

    2f06c12a2c3d13bc1fcfc61abbb12ffc1b7f916c

  • SHA256

    a66aeefedc68b21139a87d01e810ba8ccd07bdec46c96011c6de95bd8ed2ff9d

  • SHA512

    f2e79cd8e712c317942793b44c37ddf8891f7f998f654def3b304ff1bdf4c8909a6745145691f103cd03bba3debb5e059a932d7a949e08a3324570a865809df2

  • SSDEEP

    768:CyxqjQl/EMQt4Oei7RwsHxyP7nb94yLMeSrEPi+Hgvr:VxqjQ+P04wsm14Wpc

Score
10/10
neshtadiscoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      JaffaCakes118_79c039e70cf24730e17a965cc61ece54

    • Size

      133KB

    • MD5

      79c039e70cf24730e17a965cc61ece54

    • SHA1

      2f06c12a2c3d13bc1fcfc61abbb12ffc1b7f916c

    • SHA256

      a66aeefedc68b21139a87d01e810ba8ccd07bdec46c96011c6de95bd8ed2ff9d

    • SHA512

      f2e79cd8e712c317942793b44c37ddf8891f7f998f654def3b304ff1bdf4c8909a6745145691f103cd03bba3debb5e059a932d7a949e08a3324570a865809df2

    • SSDEEP

      768:CyxqjQl/EMQt4Oei7RwsHxyP7nb94yLMeSrEPi+Hgvr:VxqjQ+P04wsm14Wpc

    Score
    10/10
    neshtadiscoverypersistencespywarestealerupx

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks