General

  • Target

    JaffaCakes118_1822289fe08c7c0edce729b2394036ba

  • Size

    40KB

  • Sample

    250123-rtsdmssncy

  • MD5

    1822289fe08c7c0edce729b2394036ba

  • SHA1

    868b406fa2e0377f8b32afd5f28df317247b83fd

  • SHA256

    16b60306180f05f02d2cc2f25f0ff9fa21d9178535c597c17c5fce2fbf4b2545

  • SHA512

    3f946090930df27022e15f27fbd810020439c9f11119ca4a39aa065f3cbbfc63bb450fba05f1b74c371a65a30690fbd6db2b3eb6bb86606346b4b9ec186952a0

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ/sJBa:JxqjQ+P04wsmJCNu

Malware Config

Targets

    • Target

      JaffaCakes118_1822289fe08c7c0edce729b2394036ba

    • Size

      40KB

    • MD5

      1822289fe08c7c0edce729b2394036ba

    • SHA1

      868b406fa2e0377f8b32afd5f28df317247b83fd

    • SHA256

      16b60306180f05f02d2cc2f25f0ff9fa21d9178535c597c17c5fce2fbf4b2545

    • SHA512

      3f946090930df27022e15f27fbd810020439c9f11119ca4a39aa065f3cbbfc63bb450fba05f1b74c371a65a30690fbd6db2b3eb6bb86606346b4b9ec186952a0

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ/sJBa:JxqjQ+P04wsmJCNu

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

    • Neshta family

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v15

Tasks