Overview

overview

10

Static

static

10

JaffaCakes...f9.exe

windows7-x64

10

JaffaCakes...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_938875703eb2a6058d3dfbb6bb5c4ef9

  • Size

    314KB

  • Sample

    250329-xpyyhsxxcz

  • MD5

    938875703eb2a6058d3dfbb6bb5c4ef9

  • SHA1

    a26b8767c3c1886263bfe88612eebaffa8098df1

  • SHA256

    876604f73b1800cd8c6d8c329219b373a6b0b1a2931a6f9215b1b500c7105bc4

  • SHA512

    0a08dafdb5aabb5d0d3e671d9ffd8cfe837285d7e19374dabb532b38b2fc072c08d26d6fee65c664ed96b3a67a072d24559c9b79d58d89ad149e194c24cd427b

  • SSDEEP

    6144:k9m2/lAjLzRMjT+guSSkPxPDLGW00wja0+zIw3dMDr78KCm3pmjYWV/0yegzPyfj:F2NAjLzRMjT+guyxPDLGW00wja0+zIwe

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_938875703eb2a6058d3dfbb6bb5c4ef9

    • Size

      314KB

    • MD5

      938875703eb2a6058d3dfbb6bb5c4ef9

    • SHA1

      a26b8767c3c1886263bfe88612eebaffa8098df1

    • SHA256

      876604f73b1800cd8c6d8c329219b373a6b0b1a2931a6f9215b1b500c7105bc4

    • SHA512

      0a08dafdb5aabb5d0d3e671d9ffd8cfe837285d7e19374dabb532b38b2fc072c08d26d6fee65c664ed96b3a67a072d24559c9b79d58d89ad149e194c24cd427b

    • SSDEEP

      6144:k9m2/lAjLzRMjT+guSSkPxPDLGW00wja0+zIw3dMDr78KCm3pmjYWV/0yegzPyfj:F2NAjLzRMjT+guyxPDLGW00wja0+zIwe

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks