General

  • Target

    4584d37d138cbd2a0909c36485aa0ccd3b513a169aee5a486d7210a84f62f36c

  • Size

    669KB

  • Sample

    220707-nttd6ahed2

  • MD5

    10349a36cbd8aa3a5f13b3a591432218

  • SHA1

    236083b08295a9ecfbc43f5c603d752f6b9ed868

  • SHA256

    4584d37d138cbd2a0909c36485aa0ccd3b513a169aee5a486d7210a84f62f36c

  • SHA512

    cc0a78ff92497f9546fa13ca509135d874c23f3843efa5050345c8f691062184bfb7931fda958731d675a77c96f271f2b25d0a603547decef403f987f673d4b3

Score
10/10

Malware Config

Targets

    • Target

      4584d37d138cbd2a0909c36485aa0ccd3b513a169aee5a486d7210a84f62f36c

    • Size

      669KB

    • MD5

      10349a36cbd8aa3a5f13b3a591432218

    • SHA1

      236083b08295a9ecfbc43f5c603d752f6b9ed868

    • SHA256

      4584d37d138cbd2a0909c36485aa0ccd3b513a169aee5a486d7210a84f62f36c

    • SHA512

      cc0a78ff92497f9546fa13ca509135d874c23f3843efa5050345c8f691062184bfb7931fda958731d675a77c96f271f2b25d0a603547decef403f987f673d4b3

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks