Overview

overview

10

Static

static

10

JaffaCakes...c7.exe

windows7-x64

10

JaffaCakes...c7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_ccba8c205d7fc53dd6b736ceb35c26c7

  • Size

    40KB

  • Sample

    250209-jbmfnszlb1

  • MD5

    ccba8c205d7fc53dd6b736ceb35c26c7

  • SHA1

    18cf604fa34d42459b6d84553c22c1138f6b900e

  • SHA256

    3ea018b0f79eb20a8107ef22e503a63e2966ef0e6f15afd84f2b1c991805531d

  • SHA512

    a3d1f866bbcdce1a4bd5e6689a0a3f05c576d3ea81547692190af9bcc8cfafeb568a7a02b1df4df45726fc339e8e47a73e2435e331f101bdc9fb3521b31b11fc

  • SSDEEP

    768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_ccba8c205d7fc53dd6b736ceb35c26c7

    • Size

      40KB

    • MD5

      ccba8c205d7fc53dd6b736ceb35c26c7

    • SHA1

      18cf604fa34d42459b6d84553c22c1138f6b900e

    • SHA256

      3ea018b0f79eb20a8107ef22e503a63e2966ef0e6f15afd84f2b1c991805531d

    • SHA512

      a3d1f866bbcdce1a4bd5e6689a0a3f05c576d3ea81547692190af9bcc8cfafeb568a7a02b1df4df45726fc339e8e47a73e2435e331f101bdc9fb3521b31b11fc

    • SSDEEP

      768:eyxqjQl/EMQt4Oei7RwsHxyP7nbxzOQdJ:JxqjQ+P04wsmJC

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks