General

  • Target

    JaffaCakes118_6fe1fdc0f1deeb8c1c830cf040ce6309

  • Size

    1.4MB

  • Sample

    250107-vy695ssnfr

  • MD5

    6fe1fdc0f1deeb8c1c830cf040ce6309

  • SHA1

    6f7be3565465b211528e26de9d91ecb6088f140c

  • SHA256

    f493eeef3b85b0c935129ba9b485b0c66edc7db1ec08cd2181c95d72ef1f30ab

  • SHA512

    4075b33b7c24bc00fa645d600398c266c42428a79790790cb3dc241b45e0c425c0b101d366f677412d968b4868c10269859d85cce9b049ec29cbcff0fb64f93e

  • SSDEEP

    24576:Xtb20pkaCqT5TBWgNQ7ajVKABDR9Fh7UAeVDH9RBSrG16A6:UVg5tQ7ahdNT75sDH9RBmu56

Malware Config

Targets

    • Target

      JaffaCakes118_6fe1fdc0f1deeb8c1c830cf040ce6309

    • Size

      1.4MB

    • MD5

      6fe1fdc0f1deeb8c1c830cf040ce6309

    • SHA1

      6f7be3565465b211528e26de9d91ecb6088f140c

    • SHA256

      f493eeef3b85b0c935129ba9b485b0c66edc7db1ec08cd2181c95d72ef1f30ab

    • SHA512

      4075b33b7c24bc00fa645d600398c266c42428a79790790cb3dc241b45e0c425c0b101d366f677412d968b4868c10269859d85cce9b049ec29cbcff0fb64f93e

    • SSDEEP

      24576:Xtb20pkaCqT5TBWgNQ7ajVKABDR9Fh7UAeVDH9RBSrG16A6:UVg5tQ7ahdNT75sDH9RBmu56

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Imminent family

    • Drops startup file

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks