General

  • Target

    e207693a0d28f9b5da56a8191d76fe3f_JaffaCakes118

  • Size

    455KB

  • Sample

    240915-jt83dstenm

  • MD5

    e207693a0d28f9b5da56a8191d76fe3f

  • SHA1

    43709bf8b251fd478ef14f86cddfad47b563c41a

  • SHA256

    ee973121367164956cf11f1e3747136f3d5ae0a7bf5b93d16f9544a77e462f31

  • SHA512

    f7ef8eeba533e67845f4eda94e1d6a551eb2f6d83a37ed581092fc9d99c5506a7d4e7e94624f568361a611bb2af3802b7e73d64b35048ef01e4ea14a1f818e5a

  • SSDEEP

    12288:XVlgmU+jpvnSs1/RvptXqQQxAQLGoSxtALqtu7rI:ngmUps5tptajxlLHVLX

Malware Config

Targets

    • Target

      e207693a0d28f9b5da56a8191d76fe3f_JaffaCakes118

    • Size

      455KB

    • MD5

      e207693a0d28f9b5da56a8191d76fe3f

    • SHA1

      43709bf8b251fd478ef14f86cddfad47b563c41a

    • SHA256

      ee973121367164956cf11f1e3747136f3d5ae0a7bf5b93d16f9544a77e462f31

    • SHA512

      f7ef8eeba533e67845f4eda94e1d6a551eb2f6d83a37ed581092fc9d99c5506a7d4e7e94624f568361a611bb2af3802b7e73d64b35048ef01e4ea14a1f818e5a

    • SSDEEP

      12288:XVlgmU+jpvnSs1/RvptXqQQxAQLGoSxtALqtu7rI:ngmUps5tptajxlLHVLX

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Drops startup file

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks