Overview

overview

10

Static

static

3

95c13c093a...18.exe

windows7-x64

10

95c13c093a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95c13c093af79e225282384aeaf654fe_JaffaCakes118

  • Size

    375KB

  • Sample

    240604-wjc87aee5v

  • MD5

    95c13c093af79e225282384aeaf654fe

  • SHA1

    318e3cbbbdeb0c2dadebd96fa926a185d2338415

  • SHA256

    20bbb3f029a157dfb72a4ff3c8c004d036c387409239d424d8acef7590d80d3a

  • SHA512

    b5b66e6d32b9988f521e499f6aa85ffc1ff9a3b01dbeb2e71ceedfef8105048c114566f6497316e696a28202db0fb3b44f0afb0fa1a31fb02f1465cfc41f23b2

  • SSDEEP

    6144:OT7TokKC82Vj/aqda+4q3c/bofNVNMbINgKg0LNTUrxj2nCvDI:gvo3C80j5SdDofNVabISKgETUtjeCvD

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      95c13c093af79e225282384aeaf654fe_JaffaCakes118

    • Size

      375KB

    • MD5

      95c13c093af79e225282384aeaf654fe

    • SHA1

      318e3cbbbdeb0c2dadebd96fa926a185d2338415

    • SHA256

      20bbb3f029a157dfb72a4ff3c8c004d036c387409239d424d8acef7590d80d3a

    • SHA512

      b5b66e6d32b9988f521e499f6aa85ffc1ff9a3b01dbeb2e71ceedfef8105048c114566f6497316e696a28202db0fb3b44f0afb0fa1a31fb02f1465cfc41f23b2

    • SSDEEP

      6144:OT7TokKC82Vj/aqda+4q3c/bofNVNMbINgKg0LNTUrxj2nCvDI:gvo3C80j5SdDofNVabISKgETUtjeCvD

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks