General

  • Target

    1aeafb4aeda2e03af35db00806c4a752_JaffaCakes118

  • Size

    534KB

  • Sample

    240506-ftprzaac5z

  • MD5

    1aeafb4aeda2e03af35db00806c4a752

  • SHA1

    dd0a5862ffbccc7949e8fd6407ef4ee717ba4aac

  • SHA256

    cc29af4836750180f2e29745658cf1fd45302c2dc48c952cf38835370932a6f8

  • SHA512

    a797b0514d2325f4641d1aca542b2fa6d92f1ef71882f549ba0cc33c48ebc392d72787b4cf63a336c4a4220a47d06b2fe260f157b3d2f4346c7c54472f0edcb9

  • SSDEEP

    6144:ZbuodmSEjapEQaFd8M6rjiiiJUWWAxlp4HqUhiNAyV31RFp07k0rqQ8:MAHlaF6j2iiJUWfl27iKQRFp4kV

Score
10/10

Malware Config

Targets

    • Target

      1aeafb4aeda2e03af35db00806c4a752_JaffaCakes118

    • Size

      534KB

    • MD5

      1aeafb4aeda2e03af35db00806c4a752

    • SHA1

      dd0a5862ffbccc7949e8fd6407ef4ee717ba4aac

    • SHA256

      cc29af4836750180f2e29745658cf1fd45302c2dc48c952cf38835370932a6f8

    • SHA512

      a797b0514d2325f4641d1aca542b2fa6d92f1ef71882f549ba0cc33c48ebc392d72787b4cf63a336c4a4220a47d06b2fe260f157b3d2f4346c7c54472f0edcb9

    • SSDEEP

      6144:ZbuodmSEjapEQaFd8M6rjiiiJUWWAxlp4HqUhiNAyV31RFp07k0rqQ8:MAHlaF6j2iiJUWfl27iKQRFp4kV

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks