Overview

overview

10

Static

static

3

2feb1f47de...18.exe

windows7-x64

10

2feb1f47de...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2feb1f47de85fc805b770965fbd56498_JaffaCakes118

  • Size

    474KB

  • Sample

    240510-tglfnsdh2v

  • MD5

    2feb1f47de85fc805b770965fbd56498

  • SHA1

    2edc489027951f8c63b4db6be2bd3d27f2a1930d

  • SHA256

    f5c252667a88b7f12afa26e0579036cba64c3c95180b7ad86c4f26ee26c1e922

  • SHA512

    dd51f936144f4ce48dd789fc95b60f912fc4ec59427a51863de523408f53d304c5f1803b827ee4e0ef7e90976c3e8113e245649141f3c7ffb47cd11908e97ae5

  • SSDEEP

    12288:QMfohPnK0D+Sij8vtEJc5bMD/NjlGjiw:QMfoVKXUEj

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      2feb1f47de85fc805b770965fbd56498_JaffaCakes118

    • Size

      474KB

    • MD5

      2feb1f47de85fc805b770965fbd56498

    • SHA1

      2edc489027951f8c63b4db6be2bd3d27f2a1930d

    • SHA256

      f5c252667a88b7f12afa26e0579036cba64c3c95180b7ad86c4f26ee26c1e922

    • SHA512

      dd51f936144f4ce48dd789fc95b60f912fc4ec59427a51863de523408f53d304c5f1803b827ee4e0ef7e90976c3e8113e245649141f3c7ffb47cd11908e97ae5

    • SSDEEP

      12288:QMfohPnK0D+Sij8vtEJc5bMD/NjlGjiw:QMfoVKXUEj

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks