General

  • Target

    21a90dce975177310886381dd5f8560371a66349f0d47dcad689351c9587a76f

  • Size

    322KB

  • Sample

    220612-jqnx2sgfb8

  • MD5

    5498e9b6ae461a11b23f493f0a2747ae

  • SHA1

    1bb0a26dc7151649441e17f7806ad5106e39bbab

  • SHA256

    21a90dce975177310886381dd5f8560371a66349f0d47dcad689351c9587a76f

  • SHA512

    fbc218fbaf3074130bd8afeb19ee1f988ca494c181c4f3fea93220d96a6b64d3c0b0de04fd461c5d71b02ad53f13c59a4608df00e061b42f5e026d483eef62b9

Score
10/10

Malware Config

Targets

    • Target

      21a90dce975177310886381dd5f8560371a66349f0d47dcad689351c9587a76f

    • Size

      322KB

    • MD5

      5498e9b6ae461a11b23f493f0a2747ae

    • SHA1

      1bb0a26dc7151649441e17f7806ad5106e39bbab

    • SHA256

      21a90dce975177310886381dd5f8560371a66349f0d47dcad689351c9587a76f

    • SHA512

      fbc218fbaf3074130bd8afeb19ee1f988ca494c181c4f3fea93220d96a6b64d3c0b0de04fd461c5d71b02ad53f13c59a4608df00e061b42f5e026d483eef62b9

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks