General

  • Target

    f6f24d49388aa00a9bbe0d9a62cbb8b3_JaffaCakes118

  • Size

    376KB

  • Sample

    240925-1z831stcnd

  • MD5

    f6f24d49388aa00a9bbe0d9a62cbb8b3

  • SHA1

    ec04b10726c95688e7d6d92686d0113aca10dcd2

  • SHA256

    04aaa920f757073a2286059c035f3bc8aa26686ffed094f144db785385687f16

  • SHA512

    7f940b39f041d9ce88cbdfe3450999f34a439bb05541c9b1710959cbcbfc41ae1de25651bc5aa7ac92dcddf41a7b0dfc25737f5f60e509c727936f4a55d53c28

  • SSDEEP

    6144:WVHryjg/fgDPOAQAuyYypSiHtEnSHpUEBBLto1FH9TkB5x+qGXjZdbKZka9t:oHrPIbOAgyBsiHtASDBho15dQH+qcZd6

Malware Config

Targets

    • Target

      f6f24d49388aa00a9bbe0d9a62cbb8b3_JaffaCakes118

    • Size

      376KB

    • MD5

      f6f24d49388aa00a9bbe0d9a62cbb8b3

    • SHA1

      ec04b10726c95688e7d6d92686d0113aca10dcd2

    • SHA256

      04aaa920f757073a2286059c035f3bc8aa26686ffed094f144db785385687f16

    • SHA512

      7f940b39f041d9ce88cbdfe3450999f34a439bb05541c9b1710959cbcbfc41ae1de25651bc5aa7ac92dcddf41a7b0dfc25737f5f60e509c727936f4a55d53c28

    • SSDEEP

      6144:WVHryjg/fgDPOAQAuyYypSiHtEnSHpUEBBLto1FH9TkB5x+qGXjZdbKZka9t:oHrPIbOAgyBsiHtASDBho15dQH+qcZd6

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks