Overview

overview

10

Static

static

3

e0a9bc7026...18.exe

windows7-x64

7

e0a9bc7026...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0a9bc7026d31a579bddcf6fb1915326_JaffaCakes118

  • Size

    321KB

  • Sample

    240914-vyak6swdqd

  • MD5

    e0a9bc7026d31a579bddcf6fb1915326

  • SHA1

    2477ed4b8497c57eefc897a7400d27f4d653025a

  • SHA256

    648f127e312e5b2553c583dfe7628f8c7f9e2b2f03d26398bd1ef0aa85fa7f65

  • SHA512

    6b7e02ed3deeb7565566a3f57c6d8e646f1e2a0c491ec056d09a361d15cff24b3f3e7ce85b0ff66799decd668a212d0937be1c33fc0e6d551d2584b1d4888097

  • SSDEEP

    6144:aY5GHKqSccAXTIzUzWvxv7vV+G7zPoAz0Q54HeyJAud+V3Oj:aGGHKDccAX0AWvxzvV+zAz03HFB

Score
10/10
imminentdiscoveryspywaretrojan

Malware Config

Targets

    • Target

      e0a9bc7026d31a579bddcf6fb1915326_JaffaCakes118

    • Size

      321KB

    • MD5

      e0a9bc7026d31a579bddcf6fb1915326

    • SHA1

      2477ed4b8497c57eefc897a7400d27f4d653025a

    • SHA256

      648f127e312e5b2553c583dfe7628f8c7f9e2b2f03d26398bd1ef0aa85fa7f65

    • SHA512

      6b7e02ed3deeb7565566a3f57c6d8e646f1e2a0c491ec056d09a361d15cff24b3f3e7ce85b0ff66799decd668a212d0937be1c33fc0e6d551d2584b1d4888097

    • SSDEEP

      6144:aY5GHKqSccAXTIzUzWvxv7vV+G7zPoAz0Q54HeyJAud+V3Oj:aGGHKDccAX0AWvxzvV+zAz03HFB

    Score
    10/10
    discoveryimminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks