Overview

overview

10

Static

static

10

JaffaCakes...00.exe

windows7-x64

10

JaffaCakes...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_205380449dea9056b68e8ed7c7cb3900

  • Size

    135KB

  • Sample

    250106-ncsrasvmes

  • MD5

    205380449dea9056b68e8ed7c7cb3900

  • SHA1

    0dcf213ed3a15add135fbc09a6549c1298a0c637

  • SHA256

    29cd289f7bb54a307c0a7aabaced5f9aea79cccf4eb576d40128deff2e902e7f

  • SHA512

    9caeb1d74624ec3262267512d48c8770535b553910413f47f3b58151154eb89494ee63c9363540a842c27d275c8d79803a3bf5799370f8b4c3d905d33fdad445

  • SSDEEP

    3072:v5rCqOP1iYxpX58VcGp3/zsaMWr85C35rCqOP1iYxpX58VcGp3/zO:v5ezrnOLs1W935ezrnOLO

Score
10/10
neshtadiscoverypersistencespyware

Malware Config

Targets

    • Target

      JaffaCakes118_205380449dea9056b68e8ed7c7cb3900

    • Size

      135KB

    • MD5

      205380449dea9056b68e8ed7c7cb3900

    • SHA1

      0dcf213ed3a15add135fbc09a6549c1298a0c637

    • SHA256

      29cd289f7bb54a307c0a7aabaced5f9aea79cccf4eb576d40128deff2e902e7f

    • SHA512

      9caeb1d74624ec3262267512d48c8770535b553910413f47f3b58151154eb89494ee63c9363540a842c27d275c8d79803a3bf5799370f8b4c3d905d33fdad445

    • SSDEEP

      3072:v5rCqOP1iYxpX58VcGp3/zsaMWr85C35rCqOP1iYxpX58VcGp3/zO:v5ezrnOLs1W935ezrnOLO

    Score
    10/10
    neshtadiscoverypersistencespyware

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks