Overview

overview

10

Static

static

1

0a37ecfea5...18.exe

windows7-x64

10

0a37ecfea5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a37ecfea5074fff2de431e643e74af0_JaffaCakes118

  • Size

    693KB

  • Sample

    240430-v3v3nsbg2z

  • MD5

    0a37ecfea5074fff2de431e643e74af0

  • SHA1

    4ff3dfa39ae7fd46772c30ff547ed935e134396f

  • SHA256

    114ad38ef50939dbc71a24923dff65aad0167b7679805d3c3a5a2fd4b6925247

  • SHA512

    7ee5854e7e3cebf76de910b47f427095c420cd27c227d74cd0c62e44f2adfc429c1abb02391cc7ca15df28a99ce471c4912d4a41fc43e234d78029f330f3c33f

  • SSDEEP

    12288:tSIzbMSwyUI2buNNqwfVsQV2wWU4dh2hPnmrTVr5i38VeUbBxjv:tSibMSws2SqwGuZUgz3kXjv

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      0a37ecfea5074fff2de431e643e74af0_JaffaCakes118

    • Size

      693KB

    • MD5

      0a37ecfea5074fff2de431e643e74af0

    • SHA1

      4ff3dfa39ae7fd46772c30ff547ed935e134396f

    • SHA256

      114ad38ef50939dbc71a24923dff65aad0167b7679805d3c3a5a2fd4b6925247

    • SHA512

      7ee5854e7e3cebf76de910b47f427095c420cd27c227d74cd0c62e44f2adfc429c1abb02391cc7ca15df28a99ce471c4912d4a41fc43e234d78029f330f3c33f

    • SSDEEP

      12288:tSIzbMSwyUI2buNNqwfVsQV2wWU4dh2hPnmrTVr5i38VeUbBxjv:tSibMSws2SqwGuZUgz3kXjv

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks