Analysis
-
max time kernel
152s -
max time network
158s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
31/05/2022, 06:20
General
-
Target
065aa0002333f6aa1897bf605e564a658d768b685d2b5839e1ffa3697709ecd8.exe
-
Size
323KB
-
MD5
c6c3d74303e99631db4a23129ba8d558
-
SHA1
0eb58bed34743c8841d28b4398a773c5ffcdf294
-
SHA256
065aa0002333f6aa1897bf605e564a658d768b685d2b5839e1ffa3697709ecd8
-
SHA512
a25e40e247266011b80f782d4efb135f2e8ef1d00a2450edf2e693a6993ee48264f5c0c6ff7a852105bc4f33fddcf8aa70009175fa580b6060d7385626ece3ea
Score
10/10
Malware Config
Signatures
-
Imminent RAT
Remote-access trojan based on Imminent Monitor remote admin software.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\065aa0002333f6aa1897bf605e564a658d768b685d2b5839e1ffa3697709ecd8.exe"C:\Users\Admin\AppData\Local\Temp\065aa0002333f6aa1897bf605e564a658d768b685d2b5839e1ffa3697709ecd8.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
5.7MB
-
Filesize
11.0MB
-
Filesize
7.6MB
-
Filesize
1.5MB
-
Filesize
11.9MB
-
Filesize
1.6MB
-
Filesize
964KB
-
Filesize
5.2MB
-
Filesize
1.0MB
-
Filesize
232KB
-
Filesize
5.7MB
-
Filesize
11.0MB
-
Filesize
7.6MB
-
Filesize
1.5MB
-
Filesize
11.9MB
-
Filesize
1.6MB
-
Filesize
964KB
-
Filesize
1.0MB
-
Filesize
232KB