Overview

overview

10

Static

static

3

b7e50386f0...18.exe

windows7-x64

10

b7e50386f0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7e50386f0f5819c8a286726790405bf_JaffaCakes118

  • Size

    355KB

  • Sample

    240617-lfl2taycrp

  • MD5

    b7e50386f0f5819c8a286726790405bf

  • SHA1

    bb5eae5684b4a4cfefccc069488f0aace76a1f96

  • SHA256

    31ce8d6d668c443c7eb5648d7d09c4db5edb6260d06c4439c64e96901e20e8cc

  • SHA512

    f8f87dde4adea619111236611eefb5f475de6e518e1827b0b46e383b686d697badd93d6897b038df93b10091956065def88e9cf349c468434506c911bf4e9735

  • SSDEEP

    6144:0Y6yVbWCcMKN8ULZtbViAmizk4s/RFLoM:0Y6y1WiKN3Lbp/kpv

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      b7e50386f0f5819c8a286726790405bf_JaffaCakes118

    • Size

      355KB

    • MD5

      b7e50386f0f5819c8a286726790405bf

    • SHA1

      bb5eae5684b4a4cfefccc069488f0aace76a1f96

    • SHA256

      31ce8d6d668c443c7eb5648d7d09c4db5edb6260d06c4439c64e96901e20e8cc

    • SHA512

      f8f87dde4adea619111236611eefb5f475de6e518e1827b0b46e383b686d697badd93d6897b038df93b10091956065def88e9cf349c468434506c911bf4e9735

    • SSDEEP

      6144:0Y6yVbWCcMKN8ULZtbViAmizk4s/RFLoM:0Y6y1WiKN3Lbp/kpv

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks