General

  • Target
    jaffacakes118_Trojan-Dropper.Win32.Agent.bjstug.c5bc1e7d35d7d1f751d9c572c95d0f45
  • Size 1.9MB
  • Sample261006-ss2flazx8j
  • SHA256 aa9bb1a1962c6e1edd1a0f2024b853409fe5fa83297ebd5b4ce4f2014d6a3ebd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Dropper.Win32.Agent.bjstug.c5bc1e7d35d7d1f751d9c572c95d0f45
    • Size 1.9MB
    • SHA256 aa9bb1a1962c6e1edd1a0f2024b853409fe5fa83297ebd5b4ce4f2014d6a3ebd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks