Overview

overview

10

Static

static

97f02dd573...b9.exe

windows7_x64

10

97f02dd573...b9.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    97f02dd573bd2ad8b76c3c69b6c52f4cb6372e1fd6c37f9e13d9a0532dc5c5b9

  • Size

    758KB

  • Sample

    220609-qjzvasgdgl

  • MD5

    e770a4fbada35417fb5f021353c22d55

  • SHA1

    5a2c96330be7bfed17de9573ccbdd3b3109b359a

  • SHA256

    97f02dd573bd2ad8b76c3c69b6c52f4cb6372e1fd6c37f9e13d9a0532dc5c5b9

  • SHA512

    390d2799f1506076ef7ca88e1bc19ebdbbbf3c262ef32b2b99f471f38d58dccab84781c3c8222135ebab69529020975f55fe777a1f0a23c3936e8966ef4782a4

Score
10/10
imminentpersistencespywaretrojan

Malware Config

Targets

    • Target

      97f02dd573bd2ad8b76c3c69b6c52f4cb6372e1fd6c37f9e13d9a0532dc5c5b9

    • Size

      758KB

    • MD5

      e770a4fbada35417fb5f021353c22d55

    • SHA1

      5a2c96330be7bfed17de9573ccbdd3b3109b359a

    • SHA256

      97f02dd573bd2ad8b76c3c69b6c52f4cb6372e1fd6c37f9e13d9a0532dc5c5b9

    • SHA512

      390d2799f1506076ef7ca88e1bc19ebdbbbf3c262ef32b2b99f471f38d58dccab84781c3c8222135ebab69529020975f55fe777a1f0a23c3936e8966ef4782a4

    Score
    10/10
    imminentpersistencespywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks