Analysis
-
max time kernel
149s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
19-05-2024 16:33
General
-
Target
5a5c53025a2cbcded087976d7c0297bd_JaffaCakes118.exe
-
Size
338KB
-
MD5
5a5c53025a2cbcded087976d7c0297bd
-
SHA1
fe7693c03711717542db3a18317ea342405da2eb
-
SHA256
45d65cbd463f786f09f66a62c16cbecfe29f08fe6270ce45ab30794d02d4d11f
-
SHA512
acddb60a4699ce9ce1f327d3e435d3ff8d4c9e11172600e8ab0d27a3c2bb09cf27417e4951be4e45e299b166227baa01f8df40829b2af979f15271b7e77dcdde
-
SSDEEP
6144:N/CZiMheCgzF2gCF04xC5fX9U+7lyfXT4gPlcnkNCld/Jzm5EY/FmigE6d:NaZhw92gCFZC1XNZ4T/PlckNCldCEwSX
Score
10/10
Malware Config
Signatures
-
Imminent RAT
Remote-access trojan based on Imminent Monitor remote admin software.
-
Drops desktop.ini file(s) 2 IoCs
-
Drops file in Windows directory 3 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a5c53025a2cbcded087976d7c0297bd_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\5a5c53025a2cbcded087976d7c0297bd_JaffaCakes118.exe"1⤵
- Drops desktop.ini file(s)
- Drops file in Windows directory
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB