Overview

overview

10

Static

static

5

431e42ed4d...57.exe

windows7_x64

10

431e42ed4d...57.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    431e42ed4df4f2ead4a87745376e92ac9b7ea51d08be4a5eefe151d1e9f25b57

  • Size

    1.8MB

  • Sample

    220625-k63xksecgm

  • MD5

    2cf781524cfc2de65a27fa5304d1db0f

  • SHA1

    57177f7fd21c51aaf2cbcc96ac9e1f6f00cf5a65

  • SHA256

    431e42ed4df4f2ead4a87745376e92ac9b7ea51d08be4a5eefe151d1e9f25b57

  • SHA512

    50f2d0aebf1bbec70dcd6c13b894353c4f9946ac9afa7c5bd3996ce733f6f3d632e3d66cad782c008e2e5fce1e679dd35b76ed9701aaa5b3236122461ad010e6

Score
10/10
imminentspywaretrojan

Malware Config

Targets

    • Target

      431e42ed4df4f2ead4a87745376e92ac9b7ea51d08be4a5eefe151d1e9f25b57

    • Size

      1.8MB

    • MD5

      2cf781524cfc2de65a27fa5304d1db0f

    • SHA1

      57177f7fd21c51aaf2cbcc96ac9e1f6f00cf5a65

    • SHA256

      431e42ed4df4f2ead4a87745376e92ac9b7ea51d08be4a5eefe151d1e9f25b57

    • SHA512

      50f2d0aebf1bbec70dcd6c13b894353c4f9946ac9afa7c5bd3996ce733f6f3d632e3d66cad782c008e2e5fce1e679dd35b76ed9701aaa5b3236122461ad010e6

    Score
    10/10
    imminentspywaretrojan

    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

      trojanspywareimminent

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks