General

  • Target
    jaffacakes118_Trojan.MSIL.Crypt.gevu.378b54c22eb48b8fbe616088e8ab5bb0
  • Size 328KB
  • Sample261016-dy3hhswwcs
  • SHA256 cb8a7764ccd67b44d6befc551bbcf5d98223c03266a59102c8cf8cb3134edd63
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan.MSIL.Crypt.gevu.378b54c22eb48b8fbe616088e8ab5bb0
    • Size 328KB
    • SHA256 cb8a7764ccd67b44d6befc551bbcf5d98223c03266a59102c8cf8cb3134edd63
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v16

Tasks