General

  • Target

    0ff8298fb3d33364c77c59fe12d1afa40fb7c370aeabe96ea18979ee9f370b63

  • Size

    321KB

  • Sample

    220604-q7n3psecar

  • MD5

    d174a4944559cc634b99c3d1bdc317c9

  • SHA1

    425107c55d340e5057b2150813ecfbfbc4f1d79a

  • SHA256

    0ff8298fb3d33364c77c59fe12d1afa40fb7c370aeabe96ea18979ee9f370b63

  • SHA512

    13357e9ddd76f86fdf4dd922d18a9a01daf89a0465faab00f056a76ee040a75344525ad49217cb47206b3218f5439d4b2213ba035c190ea08ef71670968d2519

Score
10/10

Malware Config

Targets

    • Target

      0ff8298fb3d33364c77c59fe12d1afa40fb7c370aeabe96ea18979ee9f370b63

    • Size

      321KB

    • MD5

      d174a4944559cc634b99c3d1bdc317c9

    • SHA1

      425107c55d340e5057b2150813ecfbfbc4f1d79a

    • SHA256

      0ff8298fb3d33364c77c59fe12d1afa40fb7c370aeabe96ea18979ee9f370b63

    • SHA512

      13357e9ddd76f86fdf4dd922d18a9a01daf89a0465faab00f056a76ee040a75344525ad49217cb47206b3218f5439d4b2213ba035c190ea08ef71670968d2519

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks