Overview

overview

10

Static

static

world.exe

windows7_x64

10

world.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ec7b4acd3736a6f3ca352870266acc757e37dd1f403e95f242e88b1e0cac08d

  • Size

    365KB

  • Sample

    220604-wdaacaheb8

  • MD5

    e94896dc2181cca029aa282595a33b3d

  • SHA1

    9563a85a3a87e91454737a90b091231b2d3da773

  • SHA256

    0ec7b4acd3736a6f3ca352870266acc757e37dd1f403e95f242e88b1e0cac08d

  • SHA512

    284a3bf5d027420813de8f572ea15cab31a844b4786bd13625707f35fe9b744ff1947569cd80422620d1a73097924d933e9e0be6af2769f5602eab8e2edfd1d5

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      world.exe

    • Size

      389KB

    • MD5

      e739ada446f3eae28ea6de8992ef9c0f

    • SHA1

      8f520ac743aa4b04ee9aa72fa3c7023755660a09

    • SHA256

      896fd6c33f509046ba70175e2c3458ab0ccafe71871fd2c283cc3e472d869412

    • SHA512

      95e3d41fdd0478462b41ccaa1c4a086731879bdc143338fbabec1a524af25c9e1767edd0e8bdec042a7564f3c633e6d7426216e51e797a3d5e4f5beea509e930

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Drops startup file

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks