General

  • Target

    f30ffc111e7f22d9f7536059ac034b1f_JaffaCakes118

  • Size

    380KB

  • Sample

    240924-hnsyjsybpb

  • MD5

    f30ffc111e7f22d9f7536059ac034b1f

  • SHA1

    b6406d4ce17817efd000733649bcb5de0729909f

  • SHA256

    0ea41c34dab9e877011658a8ed6a4675e3e6699f2a8d96f9928165959adb9a93

  • SHA512

    bd8fc40814e7b350784cb20d3b378a8265f28b19034d4a5997db8f357017792c80207bf43a50a696c41fa71155db78b8608cc18cecae78caa15cf058bcd10de3

  • SSDEEP

    6144:wJg/L+qcDdhyFbG3/lmiJnwSiBTJDCppvJqq1SKSljYcJHPsiiGY4QbcIZ:wJg/SqcDOkdmiJwNBYppvcqklkYiGY4k

Malware Config

Targets

    • Target

      f30ffc111e7f22d9f7536059ac034b1f_JaffaCakes118

    • Size

      380KB

    • MD5

      f30ffc111e7f22d9f7536059ac034b1f

    • SHA1

      b6406d4ce17817efd000733649bcb5de0729909f

    • SHA256

      0ea41c34dab9e877011658a8ed6a4675e3e6699f2a8d96f9928165959adb9a93

    • SHA512

      bd8fc40814e7b350784cb20d3b378a8265f28b19034d4a5997db8f357017792c80207bf43a50a696c41fa71155db78b8608cc18cecae78caa15cf058bcd10de3

    • SSDEEP

      6144:wJg/L+qcDdhyFbG3/lmiJnwSiBTJDCppvJqq1SKSljYcJHPsiiGY4QbcIZ:wJg/SqcDOkdmiJwNBYppvcqklkYiGY4k

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks