Overview

overview

10

Static

static

3

a2ff9b4520...18.exe

windows7-x64

10

a2ff9b4520...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2ff9b452041a6ff6097db779da26d70_JaffaCakes118

  • Size

    455KB

  • Sample

    240612-3tlfwawbmc

  • MD5

    a2ff9b452041a6ff6097db779da26d70

  • SHA1

    d9fb90605868c19cdc91c556fb9abfcd09fcdff5

  • SHA256

    c4d9db58c442972cbcb09632bd06b477c6a33f3827a00ac0ec2baeb6a0e6e9cc

  • SHA512

    2c2012fb5821a26d3aa4f5bb645d087978b846ddecd87cc5c4ece039dbac011f44bcf263fbfc383f5546d906391c9c5d5af7e81d7aa92427832de107505c3867

  • SSDEEP

    12288:bRVbfvJSlmOPufGjKH2KcDx/2aTxryFM0v+YXO:bfNonjKH2KcF/RM2

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      a2ff9b452041a6ff6097db779da26d70_JaffaCakes118

    • Size

      455KB

    • MD5

      a2ff9b452041a6ff6097db779da26d70

    • SHA1

      d9fb90605868c19cdc91c556fb9abfcd09fcdff5

    • SHA256

      c4d9db58c442972cbcb09632bd06b477c6a33f3827a00ac0ec2baeb6a0e6e9cc

    • SHA512

      2c2012fb5821a26d3aa4f5bb645d087978b846ddecd87cc5c4ece039dbac011f44bcf263fbfc383f5546d906391c9c5d5af7e81d7aa92427832de107505c3867

    • SSDEEP

      12288:bRVbfvJSlmOPufGjKH2KcDx/2aTxryFM0v+YXO:bfNonjKH2KcF/RM2

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks