Overview

overview

10

Static

static

10

JaffaCakes...7e.exe

windows7-x64

10

JaffaCakes...7e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_7a2801b71758aec43059f0083103377e

  • Size

    550KB

  • Sample

    250104-rmtywsvqbk

  • MD5

    7a2801b71758aec43059f0083103377e

  • SHA1

    b5dcfb4b2f229d8b50644bb872ac1991550f4cf7

  • SHA256

    8552021656d465e82680be25a4ae3ab8cf8992381b39688f49fe24193808584e

  • SHA512

    80da76e0d8ed6b9f2ab7dddc0b70530afd165735e26fa64a437c1105cec7d0bb41cfd5410222dd5113a984fa32e78780c2cce7071f808ff65f5ab9aa5b82c876

  • SSDEEP

    12288:QP0N8Pu4xHFGx27cGrAbhfTYawhJdxLs4Kr4Tu/:QP0NNWE2zrAbhfD4Vs4n2

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_7a2801b71758aec43059f0083103377e

    • Size

      550KB

    • MD5

      7a2801b71758aec43059f0083103377e

    • SHA1

      b5dcfb4b2f229d8b50644bb872ac1991550f4cf7

    • SHA256

      8552021656d465e82680be25a4ae3ab8cf8992381b39688f49fe24193808584e

    • SHA512

      80da76e0d8ed6b9f2ab7dddc0b70530afd165735e26fa64a437c1105cec7d0bb41cfd5410222dd5113a984fa32e78780c2cce7071f808ff65f5ab9aa5b82c876

    • SSDEEP

      12288:QP0N8Pu4xHFGx27cGrAbhfTYawhJdxLs4Kr4Tu/:QP0NNWE2zrAbhfD4Vs4n2

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks