Overview

overview

10

Static

static

10

JaffaCakes...60.exe

windows7-x64

10

JaffaCakes...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_0e6fbbfbdab425e061655d9c92047f60

  • Size

    344KB

  • Sample

    250122-rl5c8s1mep

  • MD5

    0e6fbbfbdab425e061655d9c92047f60

  • SHA1

    3bc64ac06e474ddc7a82acdb6729f4c25898ce25

  • SHA256

    f8bb37680621cfd4803f74306d4c4ca1b60d5daf57f8cc354ccacc35da13c049

  • SHA512

    a9b21f6c67d98d20779a0fc4ac3e7df87e654f6ecd14a17879de32232e4f603fbd41da020b9f6e1c87763e72ae99471cb2d4023fd6287fa7317c25735178dfe9

  • SSDEEP

    6144:k98FAVACPa+KTdAaT82eWOa2n1ln3zowzbtf0/T8K8m3VDxAaLG1TXLgaUNnu4hI:d+hC+KTdAAOae1ln3zowzbtf0/T8K8me

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_0e6fbbfbdab425e061655d9c92047f60

    • Size

      344KB

    • MD5

      0e6fbbfbdab425e061655d9c92047f60

    • SHA1

      3bc64ac06e474ddc7a82acdb6729f4c25898ce25

    • SHA256

      f8bb37680621cfd4803f74306d4c4ca1b60d5daf57f8cc354ccacc35da13c049

    • SHA512

      a9b21f6c67d98d20779a0fc4ac3e7df87e654f6ecd14a17879de32232e4f603fbd41da020b9f6e1c87763e72ae99471cb2d4023fd6287fa7317c25735178dfe9

    • SSDEEP

      6144:k98FAVACPa+KTdAaT82eWOa2n1ln3zowzbtf0/T8K8m3VDxAaLG1TXLgaUNnu4hI:d+hC+KTdAAOae1ln3zowzbtf0/T8K8me

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks