Overview

overview

10

Static

static

3

0239df7d47...18.exe

windows7-x64

10

0239df7d47...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0239df7d47b8002859f89f32d57a1192_JaffaCakes118

  • Size

    473KB

  • Sample

    240427-c41ensab8y

  • MD5

    0239df7d47b8002859f89f32d57a1192

  • SHA1

    fb32675eb631aaee30a0c64df192e3230451409e

  • SHA256

    53a96e66d55b55c3da544f192de6ab47d3194ad878d75c9d820b83566703c8d9

  • SHA512

    c67138045eec71164f5f79f3244a7576963ef1b19270870d7a98a2c9342165f65670a17327c6a1754b6665765950a75a9c1ebf708af3eed09ddf8e47b4fbba8c

  • SSDEEP

    6144:Iz++FoyEVD3EVDz/u3rurpBQthhdHpt348LFDsiZ12aYkPSMAbuybLBhAeqSPOnu:IZG64uT4Hpto6Qo1XPYCAGnCgej

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      0239df7d47b8002859f89f32d57a1192_JaffaCakes118

    • Size

      473KB

    • MD5

      0239df7d47b8002859f89f32d57a1192

    • SHA1

      fb32675eb631aaee30a0c64df192e3230451409e

    • SHA256

      53a96e66d55b55c3da544f192de6ab47d3194ad878d75c9d820b83566703c8d9

    • SHA512

      c67138045eec71164f5f79f3244a7576963ef1b19270870d7a98a2c9342165f65670a17327c6a1754b6665765950a75a9c1ebf708af3eed09ddf8e47b4fbba8c

    • SSDEEP

      6144:Iz++FoyEVD3EVDz/u3rurpBQthhdHpt348LFDsiZ12aYkPSMAbuybLBhAeqSPOnu:IZG64uT4Hpto6Qo1XPYCAGnCgej

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Drops startup file

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks