General

  • Target
    jaffacakes118_Trojan-Spy.Win32.Hookey.ny.29fe85e345bd0760449f465dbd989e85
  • Size 3.2MB
  • Sample261012-k6cqdstybt
  • SHA256 aeee1a4e2ca34a80e450dde19d9a790857b5a5e725348b595794d546109e9cc4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Spy.Win32.Hookey.ny.29fe85e345bd0760449f465dbd989e85
    • Size 3.2MB
    • SHA256 aeee1a4e2ca34a80e450dde19d9a790857b5a5e725348b595794d546109e9cc4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks