Overview

overview

10

Static

static

10

JaffaCakes...ce.exe

windows10-2004-x64

10

JaffaCakes...ce.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_b9b269e416031c2ce6052f9ee59083ce

  • Size

    712KB

  • Sample

    250415-mw3j6ssmw9

  • MD5

    b9b269e416031c2ce6052f9ee59083ce

  • SHA1

    0d934be41d65f7269fa8940d9e44b5bee64396fb

  • SHA256

    0b4d95028c5ff457d9c914f77d7c82a45d13b677f41f3b7883561e9cdce8b546

  • SHA512

    1668d72f798ddc2b536ce15bd9675a9b32848e3bd4af1000fc9f5691b9ce212dff9636e69354e9ce9aee267e825d85fc4e137241de47c29167681c52ced968d5

  • SSDEEP

    12288:fxzRkYnEOrPM37qzHgA6/lZA32gLNNLLAR98oxsutBfxgdRg:fFRvEOrPM37qzHgA6c32gPMxsutBfxg0

Score
10/10
neshtadiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      JaffaCakes118_b9b269e416031c2ce6052f9ee59083ce

    • Size

      712KB

    • MD5

      b9b269e416031c2ce6052f9ee59083ce

    • SHA1

      0d934be41d65f7269fa8940d9e44b5bee64396fb

    • SHA256

      0b4d95028c5ff457d9c914f77d7c82a45d13b677f41f3b7883561e9cdce8b546

    • SHA512

      1668d72f798ddc2b536ce15bd9675a9b32848e3bd4af1000fc9f5691b9ce212dff9636e69354e9ce9aee267e825d85fc4e137241de47c29167681c52ced968d5

    • SSDEEP

      12288:fxzRkYnEOrPM37qzHgA6/lZA32gLNNLLAR98oxsutBfxgdRg:fFRvEOrPM37qzHgA6c32gPMxsutBfxg0

    Score
    10/10
    neshtadiscoverypersistencespywarestealer

    • Detect Neshta payload

    • Neshta

      Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

      persistencespywareneshta

    • Neshta family

      neshta

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks