General

  • Target

    1c8be3d17e18198dcda5c576f948ae23a5988e22aad3073a1a6739d5f9ed7ec0

  • Size

    320KB

  • Sample

    220607-r9q6hsdchr

  • MD5

    4a30268b139df804cc85add123fd734e

  • SHA1

    5b48f2af4eaebefe98b47e17f4a8775eb042f9ed

  • SHA256

    1c8be3d17e18198dcda5c576f948ae23a5988e22aad3073a1a6739d5f9ed7ec0

  • SHA512

    b8e0bb897dad7d2bfa033f4752a356b46baf824bd502b766a8901abc5a9bc61f57856b92271b73acc3034df63ca2665f87246296073cb183108cdc375aaac846

Score
10/10

Malware Config

Targets

    • Target

      1c8be3d17e18198dcda5c576f948ae23a5988e22aad3073a1a6739d5f9ed7ec0

    • Size

      320KB

    • MD5

      4a30268b139df804cc85add123fd734e

    • SHA1

      5b48f2af4eaebefe98b47e17f4a8775eb042f9ed

    • SHA256

      1c8be3d17e18198dcda5c576f948ae23a5988e22aad3073a1a6739d5f9ed7ec0

    • SHA512

      b8e0bb897dad7d2bfa033f4752a356b46baf824bd502b766a8901abc5a9bc61f57856b92271b73acc3034df63ca2665f87246296073cb183108cdc375aaac846

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks