General

  • Target

    492a6ee6bf7282ea5c58e5a3bb9327d56c345683ffda4746dc47dcd696b4e2f0

  • Size

    321KB

  • Sample

    220714-a1nklahba9

  • MD5

    6cdb1f126a8292a373c2768a1ad63eda

  • SHA1

    f8578db1fa21e5b86b84a26944617f09ae8e507b

  • SHA256

    492a6ee6bf7282ea5c58e5a3bb9327d56c345683ffda4746dc47dcd696b4e2f0

  • SHA512

    786ef79cb1b7904282e13fc7da9913b71d7a9ded9840c1e27028cd1ec7c5259e33c62188521ac388c1e8d74556f1c286861b1c4c1fe9f3007c366726a6a1dc51

Score
10/10

Malware Config

Targets

    • Target

      492a6ee6bf7282ea5c58e5a3bb9327d56c345683ffda4746dc47dcd696b4e2f0

    • Size

      321KB

    • MD5

      6cdb1f126a8292a373c2768a1ad63eda

    • SHA1

      f8578db1fa21e5b86b84a26944617f09ae8e507b

    • SHA256

      492a6ee6bf7282ea5c58e5a3bb9327d56c345683ffda4746dc47dcd696b4e2f0

    • SHA512

      786ef79cb1b7904282e13fc7da9913b71d7a9ded9840c1e27028cd1ec7c5259e33c62188521ac388c1e8d74556f1c286861b1c4c1fe9f3007c366726a6a1dc51

    Score
    10/10
    • Imminent RAT

      Remote-access trojan based on Imminent Monitor remote admin software.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v6

Tasks